Available Groups Right-Click Menu

New

Selecting New enables you to create a new Group. See “New Group”.

Edit

Click the Edit Group button to make changes to the current Group. The Group Editor window is displayed.

Modify group name – select the tick box and make the required changes to the Group Name, saving the changes when you close the Group Editor window.
See Table 147, “Terminology: New Group General Properties” for a description of all the Group properties.

Note: Neither the Group Name nor the Membership can be changed for a Group whose Source is Active Directory.

Copy

Selecting this options creates a copy of the currently selected Group and prefixes the name of the new Group with Copy of.

Note: A Group created using Copy will always have the Source Manual.

Copy and Open for Edit

Selecting this options creates a copy of the currently selected Group and prefixes the name of the new Group with Copy of. The new Group is opened in the Group Editor. See “Edit”.

Note: A Group created using Copy will always have the Source Manual.

Delete

Caution: Before deleting a Group, ensure there is no object (User, Group, Role or Data Definition) that can only be managed by this Group, as once deleted, these objects will no longer be able to be modified and may even be completely inaccessible (and in the case of a Data Definition, this would also apply to all the data that has been archived against it).

Select Delete to delete the current Group. The Group name is removed, however, the members of the Group remain in the list of Available Groups, Available Roles and/or Available Users as appropriate.

Note: It is not possible to delete a Group whose Source is Active Directory. Only Groups created within Management Studio (Source: Manual) can be deleted.

Edit Membership of this Group

Selecting Edit Membership of this Group enables you to add members to the current Group or remove members from the current Group. See “Members”.

Add this Group into a Role or Group

Selecting Add This Group Into a Role or Group enables you to add the Group to a Role or Group. See “Parents”.

Note: When adding Groups as Members to other Groups, ensure you are not attempting to make a Group both a Parent and a Member of another Group. If you do, the following error is displayed:

Create New User in this Group

Selecting this option creates a new User with the current Group set as the Parent. The new User is opened in the User Editor.

Create New Group in this Group

Selecting this option creates a new Group with the current Group set as the Parent. The new Group is opened in the Group Editor.

View Permissions

The Group Permissions can be viewed and edited. See Table 148, “Terminology: Group Permissions” for a description of each Category.

Control Access to this Group

You can control who has access to the current Group by configuring an Access Control List. Select Control Access to this Group. The Access Control Security Configuration window is displayed.

Items (Users, Groups and Roles) which have been given access to the Group are listed on the left. To see what access the Item has been given, select the Item and view settings for the Operations listed on the right.

The options used to configure Access Control Lists for Groups are described in Table 154.
Table 154. Terminology: Group Access Control List (ACLs)

Operation	Meaning
Item	The selected Group to which access control is being configured (Group Slough in the above example).
Users/Groups/Roles	The name of the Users/Groups/Roles (User DSX System Administrator in the above example) who are being given access to the Group (Slough in the above example).
Read	Allows the selected User, Group or Role to view the Properties of all the members of the Group (Slough). Cannot be set to Deny if Update is set to Allow.
Update	Allows the selected User, Group or Role to update the Properties (except the Passwords) of all the members of the Group (Slough in the above example). Cannot be set to Allow unless Read is set to Allow. Cannot be set to Deny if Delete, Change password or Set access control is set to Allow.
Delete	Allows the selected User, Group or Role to delete the Group (Slough in the above example). Cannot be set to Allow unless Update is set to Allow.
Change password	Allows the selected User, Group or Role to change the password of all the members of the Group (Slough in the above example). Cannot be set to Allow unless Update is set to Allow.
Set access control	Allows the selected User, Group or Role to set the access controls (configure ACLs) for all the members of the Group (Slough in the above example). Cannot be set to Allow unless Update is set to Allow.

Add and Remove Members Button

To allow a Users, Groups or Roles access to the selected Group, click Add and Remove Members.

To add access to Users, select the Users tab, select one or more users and click Add Member >>.

To add access to Groups, select the Groups tab, select one or more groups and click Add Member >>.

To add access to Roles, select the Roles tab, select one or more roles and click Add Member >>. To remove a User, Group or Role from the list, select the item in the right-hand pane and click << Remove Member.

Once you have selected all the Users, Groups and/or Roles to which you want to give access to the current Group, click Confirm. If you want to exit without adding any Users, Groups or Roles to the list click Cancel.

You are returned to the Access Control Security Configuration window. See “Control Access to this Group” for details on how to configure Access Control to the current Group for each User, Group and/or Role.

Save and Close Button

To save all the changes made, click Save and Close. The changes are saved and the Access Control Security Configuration window is closed.

Cancel Button

To exit without saving any of the changes made, click Cancel. The changes are discarded and the Access Control Security Configuration window is closed.

Properties

General Properties

The Group’s General Properties are displayed on the General Properties tab.

The Group’s General Properties are described in Table 155.

Table 155. Terminology: Group Properties: General

Term	Meaning
Name	Displays the name of the Group.
Display name	If configured, shows an alternative name for the Group.
Description	If configured, shows a description for the Group.
Source	Active Directory – the Group was added from an external source. Manual – the Group was created within Management Studio.
Hidden	Yes – the Group is Hidden. The Group’s icon is dimmed when viewed by other Users with the correct access permissions. This feature will be utilised by future enhancements. No – the Group can be viewed normally.
Group created	Displays the date and time the Group was created.
Group modified	Displays the date and time the Group was last modified.
Permissions modified	Displays the date and time the Group’s Permissions settings or the Access Control settings for this Group were last modified.

Members

The Members (Users and/or Groups) of the current Group are listed on the Members tab.

The Group Properties for the Members tab are described in Table 156.
Table 156. Terminology: Group Properties: Members

Term	Meaning
Display Name	The display name configured for the User or Group.
Name	The User name or Group name of the Member of this Group.
Description	The description configured for the User or Group.
Source	Active Directory – the User or Group was added from an external source. Manual – the User or Group was created within Management Studio.

Parents

The Parents tab shows the Parents of the current Group.

The Group Properties for the Parents tab are described in Table 157.

Table 157. Terminology: Group Properties: Parents

Term	Meaning
Display Name	The display name configured for the Role or Group.
Name	The Role name or Group name of the Parent of this Group.
Description	The description configured for the Role or Group.
Source	Active Directory – the Group was added from an external source. Manual – the Role or Group was created within Management Studio.

Permissions

The Permissions tab displays the Permissions settings.

See “Permissions” for a description of each Category.