Defining a Group Authority

About this task

Overview

Group authorities allow you to group users who exercise the same level of functional authorities. Users are grouped using local or domain Windows groups. A group is first created and then added to Connect:Direct Windows User Authorities. Group membership can be adjusted at any time.

A user can belong to more than one group. A user’s Authorities are determined by group ordering: the user has the Authorities of the first group of which the user is a member.

Use this procedure to create group authorities. Group authorities allow you to group users who exercise the same level of functional authorities.

Procedure for configuring Group Authorities using Integrated Connect:Direct Web Services:

Procedure

Select Settings > Users > Under New Functional Authority click Create.
Select Group to a Group Authority.
To add a group authority, do one of the following:
- Click New Admin to create a new group based on *Admin settings as the default.
- Click New Genusr to create a new group based on *GENUSR settings as the default.
- Click New Operator to create a new group based on *Operator settings as the default.
Type the name, from 1 to 50 alphanumeric characters, for the new group. You can use spaces.
Define the group as either a local group or domain group by doing one of the following:
- If the group is local, click Local and enter the name of the group as defined by the workstation administrator under My Computer/Manage/Local Users and Groups.
- If this is a domain group, click Domain Name, then enter the name of the group as defined by the domain administrator, and the name of the domain on which the group is defined.
Note: Local groups are groups defined locally on the server using the O/S utility for managing local users and groups. If your users are defined locally, use local groups. If your users are not defined locally but in a domain, use domain groups. If you have some users in local and some in domains, you can use both.
Check User Password Exit to allow user to obtain its password using the Password Exit.

Note: You can use this functionality only if initparms are configured to use Password Exit properly.
Do one of the following:
- To save the new group authority with default privileges, click OK.
- To modify the default group privileges, continue with the next step.
To restrict the control functions or statements users in the group are authorized to perform, change the value of the fields on the available tab to No to deny authority for that privilege and click OK.

Note: Refer to Defining User Authority for definitions of specific user authorities.
Click OK to finish defining the group authority.