Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Home / Identity Administration / User Accounts and Groups / Current: Adding Groups to Groups

EmpowerID allows you to easily add one or more groups as members of another group. When you do so, members of the added groups gain any entitlements and delegations associated with the group to which they are being added. For example, if you a group with a policy that specifies that members of that group have a home folder, and you add a group without such a policy to that group, then the members of the group without the policy will be given a home folder.

This topic demonstrates how to add groups to groups in EmpowerID.

...

Info
titlePrerequisites

EmpowerID must first be connected to an external account directory, like Active Directory. For more information, see Connecting to Active Directory.


To add a group to another group

  1. In the Navigation Sidebar, expand Identities and click Groups.
  2. Search for the group in which you want to nest another group and then click the record for that group. A list of contextual actions that can be executed against that group appear in the Actions pane.

    Info

    In the following image, the Locations pane has been collapsed to conserve screen real estate.


    Image RemovedImage Added

  3. Click the Add Group to Group action.
    Image Removed
    Image Added

  4. In the Group Lookup that appears, search for the group you want to add to the group.
  5. Tick the box beside the group to select it.
  6. Repeat, steps 5 and 6, adding as many groups as needed.
  7. When you have finished adding groups, click Submit.
    Image Removed
    Image Added

  8. Click Yes to confirm you want to add the group(s) to the group and then click OK to close the Operation Execution Summary.

To verify the nested group in EmpowerID

  1. Search for the group to which you just added the groups.
  2. From the grid, click the Logon Name link for the group.
    Image Removed
    Image Added

    This directs you to the View One page for the group. View One pages allow you to view details about an object in EmpowerID and make changes to those objects as needed.
    Image Removed
    Image Added

  3. From the View One page, expand the Nested Group Members accordion to verify that records for the new members appear.
    Image Removed
    Image Added

    Tip

    If you have an email address that is registered in EmpowerID, you can have EmpowerID email you the group membership by clicking the email icon.


To verify the nested group in Active Directory

  1. On a server with the Active Directory PowerShell module, run the following PowerShell cmdlet (substituting the group in the cmdlet with the group you nested):

    Code Block
    languagepowershell
    themeEmacs
    Get-ADPrincipalGroupMembership "London Contractors GVR1"


  2. Verifty that the group is a member of the group to which you added it.



Info
iconfalse
titleRelated Content
Section
Column
Column
  • Creating Dynamic Group Memberships
  • Importing Users and Groups
  • Removing Accounts from Groups
  • Removing Groups from Groups
  • Deleting User Accounts
  • Restoring Deleted User Accounts
  • Deleting Groups
  • Restoring Deleting Groups