Adding Groups to Groups

EmpowerID allows you to easily add one or more groups as members of another group. When you do so, members of the added groups gain any entitlements and delegations associated with the group to which they are being added. For example, if you a group with a policy that specifies that members of that group have a home folder, and you add a group without such a policy to that group, then the members of the group without the policy will be given a home folder.

To add a group to another group

1. In the navigation sidebar, expand Identity Administration and click Groups.

2. Search for the group in which you want to nest another group and then click the record for that group. A list of contextual actions that can be executed against that group appear in the Actions pane.

   
   
   

3. Click the Add Group to Group action.
   
   
   
4. In the Group Lookup that appears, search for the group you want to add to the group and then tick the box beside it to select it.
   
5. Repeat, adding as many groups as needed.
6. When you have finished adding groups, click Submit.
   
7. Click Yes to confirm you want to add the group(s) to the group. 
   
8. Click OK to close the Operation Execution Summary.
   

To verify the nested group in EmpowerID

1. From the navigation sidebar, expand System Logs and then click Audit Log.
2. From the Audit Log, search for the group in question.
   
   You should see two or more records, depending on the number of groups involved.
   

To verify the nested group in Active Directory

1. On a server with the Active Directory PowerShell module, run the following PowerShell cmdlet (substituting the group in the cmdlet with the group you nested):
   
   

   Get-ADPrincipalGroupMembership "Automation GVR1"

2. Verifty that the group is a member of the group to which you added it.