Security domains

In IBM OpenPages®, special user groups, called security domain groups, are automatically created when a Business Entity or Sub-entity object is created.

Security domain groups act as containers for users and organizational groups associated with that business entity.

In the Open Administration menu > Users and Security > Domains & Groups, each security domain group is located under a top-level (root) Security Domains folder. The name of the group corresponds to the name of the business entity to which it belongs.

Users in a security domain group are generally assigned roles to work on the objects under that entity. You can also delegate specific security management activities to administrators in a security domain group for managing users and groups within that business entity.

Note: When you expand a security domain group folder, only child security domains are displayed. To view the organizational groups and users that are associated with the security domain, click the security domain group.

Example

You want to delegate the security activity of resetting passwords to an administrator for members of a particular Sales Office security domain group.

To do this, click the Sales Office security domain group. Add the administrator or click an existing administrator. Assign the Reset Password permission. That administrator can then reset passwords for users in that Sales Office security domain group only.

You could repeat this process of delegating Reset Password permission to an administrator for each security domain group within your organizational hierarchy.