Groups

Groups are collections of permissions. Groups make it possible to maintain access permissions for several users from a single place. Groups help to minimize the amount of work that is involved with maintaining accounts, especially when several users perform the same job function.

You can associate many permissions to different users by creating groups for each job function instead of each user. You can also assign a group as a subgroup to another group.

For example, a procurement department has five procurement specialists that all perform the same jobs. Instead of applying permissions to each individual procurement specialist user account, you can create a procurement group and maintain access permissions for all procurement specialists in one group. Within the procurement group, you can assign subgroups to further refine your access permissions according to the type of procurement the specialist conducts. You can assign subgroups named office supplies, machinery, general equipment, or vehicles to the procurement group to refine access permissions.

To avoid overwriting when applying upgrades or patches, do not modify the groups that come preconfigured with the system.