Add a group with directory-based authentication

Use this procedure to add a group whose users will be authenticated through a directory service. You can give the group access to a subset of resources based on job responsibilities.

Prerequisites

Minimum required privileges: Infrastructure administrator.
The group must exist in the authentication directory service.
The credentials of a directory service user.

The appliance uses these credentials to confirm the user’s permission to access it. The credentials are not saved on the appliance.
The directory service must be added to the appliance. For more information, see Add an authentication directory service.

Adding a group with directory-based authentication

From the main menu, select Users and Groups.
Select Actions→Add group.

NOTE: If no authentication directories are configured, a dialog box opens. The dialog box contains a link that starts the procedure for adding an authentication directory.

Enter the data requested on the Add Group screen (For information, see Add/Edit Directory Group screen details):

In the Directory field, designate the authentication directory service either by selecting it from the menu of available authentication directories.

You might be required to log in to an account on the authentication directory service.

For the Group name, do one of the following:

If you know the group name, enter it in the Group name field.

Your entry can be in either the CN or DN format:

CN example:

dev.team@example.com

DN example:

cn=dev.team@example.com,ou=managed groups,
ou=accounts,dc=example,dc=com


	NOTE: The DN example was split into two lines for readability. Your entry should be on a single line.

If you want to select the group from a list of available groups, leave the Group name field empty, and click Select group.

The Connect to ... dialog box opens.

Enter the credentials to log in to the directory service and validate the connection, and then click Connect.

NOTE: The user name and password are not saved on the appliance.

If you chose to select the group name from a list of available groups, the Select a Group from ... dialog box opens so that you can do either of the following:
- Browse for the group name
- Search for the group name by entering text in the search text field. That text is used to filter for the group name.
  
  Here examples of search text:
  - cn=dev.team@example.com,ou=managed groups,ou=accounts,dc=example,dc=com
  - cn=dev.team@example.com
  - cn=dev.t*
  - dev.t*
Otherwise, the Add Group dialog box opens (proceed to step 6).
Select the group from the list, and then click OK.

The Add Group dialog box opens.

If you select Cancel, the previous Add Group screen (without an entry for the group name field) opens.
Enter the data requested on the Add Group screen. For information, see Add/Edit Directory Group screen details:

NOTE: The role or roles you select are assigned to each group member.

For more information on roles, see About user roles
Click Add to add the group and return to the Users and Groups screen, or click Add+ to add another group.
After adding the group, verify its configuration on the Users and Groups screen.

prev	up	next
Add a user with role-based access and authentication by membership in an organizational directory	home	Designate user privileges


	NOTE: If no authentication directories are configured, a dialog box opens. The dialog box contains a link that starts the procedure for adding an authentication directory.


	NOTE: The user name and password are not saved on the appliance.


	NOTE: The role or roles you select are assigned to each group member.