Creating System User Groups
Rather than assign roles to individual users, you can create user groups and assign roles to the user groups. Users who are added to a group inherit the group’s roles.
User group roles are cumulative. If you add a user to a group, the user retains its directly assigned roles and also gains the inherited roles from the group.
The following steps help you create System user groups. System user groups can be assigned system-level roles (Approver, Build Administrator, Catalog Manager, Cloud Administrator, and Zone Administrator) and organization-level roles (Business Group Viewer, Business Service Owner, Organization Manager, and Sponsor).
You can also create Organization user groups. Organization user groups can be assigned organization-level roles only. For information about creating Organization user groups, see Creating Organization User Accounts.
-
On the tab bar, tap
.
-
Tap
.
-
On the system’s page, tap
.
-
In the list, tap
.
-
Provide the user group’s name as you want it to appear in Cloud Manager, then tap
.
-
After the user group is created you can:
-
Tap
to change the group from a Cloud Manager group to an LDAP group. As opposed to a Cloud Manager group, an LDAP group’s membership is maintained in the LDAP source; you cannot add users to an LDAP group in Cloud Manager.
Use standard LDAP notation to specify the distinguished name of the user group in the LDAP source (for example, cn=orgmanagers,dc=provo,dc=netiq,dc=com).
-
If the user group is a Cloud Manager group, tap
to add users to the group, or tap to add other user groups to the group.
-
Tap any of item under to assign the user group a role related to the item.
-