DRA allows you to create temporary group assignments that provide authorized users temporary access to resources. Assistant administrators can use temporary group assignments to assign users to a target group for a specific time period. At the end of the time period, DRA automatically removes the users from the group.
The Manage Temporary Group Assignments role grants AAs powers to create and manage temporary group assignments.
Use the following powers to delegate the creation and management of temporary group assignments:
Create Temporary Group Assignments
View Temporary Group Assignments
Delete/Modify Temporary Group Assignments
Add Object to Group
Remove Object from Group
The target group and the target users must also be in the same ActiveView.
NOTE:
Assistant administrators can create, modify, and delete temporary group assignments only on the primary Administration server. They cannot manage temporary group assignments on secondary Administration servers.
DRA replicates temporary group assignments from the primary Administration server to secondary Administration servers during MMS replication.
You cannot create a temporary group assignment for a user who is already a member of the target group. If you try to create a temporary group assignment for a user who is already a member of the target group, DRA displays a warning message and does not allow you to create a temporary group assignment for the user.
If you create a temporary group assignment for a user who is not a member of the target group, DRA removes the user from the group when the temporary group assignment expires.
For more information about creating and using temporary group assignments, see the User Guide.