Configuring Group Membership

Assigning users to groups allows you to change security rights on a group of users rather than applying security settings directly to each individual user. Applying security to groups can simplify security administration in repositories with a large number of users.

A user can be a member of multiple groups. This allows that user to have the rights and privileges of each group. Rights granted or denied are cumulative. Hence, the user gains the set of rights of all the groups of which that user is a member. This may cause a conflict in rights assignments. One such case occurs when a user belongs to a group that allows the Read right on a particular document and he or she belongs to another group that denies it. In such a case, the user will be denied the access right, since denied rights take precedence over allowed rights.

Group membership can be configured through the Laserfiche Administration Console or web client management page. There are two methods for assigning users to groups. You can select a user and add that user to multiple groups, or you can select a group and add multiple users to that group; you can also add Windows or LDAP Accounts (user or group) to the group.

To assign a user to groups from the user's properties

  1. Start the Laserfiche Administration Console.
  2. In the console tree, expand the desired Laserfiche Server item.
  3. Select the desired Laserfiche repository.
  4. If security has been enabled on that repository, log in as any user who has been granted the Manage Trustees privilege for the specified repository.
  5. Expand the Users and Groups node.
  6. Click the User node.
  7. Click the user you want to assign to groups.
  8. From the Action menu, click Properties. The User Properties dialog box will appear.
  9. Select the Groups tab.
  10. Select the group to add from the Available groups list.
  11. Click Add to make the user a member of that group.
  12. Repeat with any other groups you want to add.
  13. Click OK to save your changes.

To assign users to a group from the group's properties

  1. Start the Laserfiche Administration Console.
  2. In the console tree, expand the desired Laserfiche Server item.
  3. Select the desired Laserfiche repository.
  4. If security has been enabled on that repository, log in as any user who has been granted the Manage Trustees privilege for the specified repository.
  5. Expand the Users and Groups node.
  6. Click the Groups node.
  7. Select the group you want to add users to.
  8. From the Action menu, click Properties. The Group Properties dialog box will appear.
  9. Open the Members tab.
  10. Select the user to add from the Available users list.
  11. Click Add to make that user a member of the group.
  12. Repeat with any other groups you want to add.
  13. Click OK to save your changes.

To assign Windows Accounts or LDAP Accounts to a group from the group's properties

  1. Start the Laserfiche Administration Console.
  2. In the console tree, expand the desired Laserfiche Server item.
  3. Select the desired Laserfiche repository.
  4. If security has been enabled on that repository, log in as any user who has been granted the Manage Trustees privilege for the specified repository.
  5. Expand the Users and Groups node.
  6. Click the Groups node.
  7. Click the group to which you want to add a Windows Account.
  8. From the Action menu, click Properties. The Group Properties dialog box will appear.
  9. Open the Members tab.
  10. In the Domain trustee linking option, type the domain user or group to add or click the Browse... button to search for a user. The format should be "DomainName\UserName" (for Windows Accounts) or "Common Name@ServerProfile" (for LDAP Accounts).
  11. Type or search for any additional domain users or groups to add.
  12. Click OK to save your changes.

To assign a user to groups from the user's properties

  1. Open the web client management page. Sign in as any user who has been granted the Manage Trustees privilege for the specified repository.
  2. Click Users, then select the user you want to assign to groups.
  3. In the pane that opens on the right, click Edit under Repository groups in the General tab.
  4. Click in the Search box to make a list of available groups appear. Select the group you want. Alternatively, enter the name of a group you are looking for. Select the group when you find it.
  5. Repeat step 4 with any other groups you want to add the user to.
  6. Click Save to save your changes.

To assign users to a group from the group's properties

  1. Open the web client management page. Sign in as any user who has been granted the Manage Trustees privilege for the specified repository.
  2. Navigate to the Users page, then select the Groups tab.
  3. Select the group you want to edit.
  4. In the pane that opens on the right, click on the link beside Members in the General tab.
  5. Enter a username in the Search box to find the user you want. Alternatively, check the boxes next to the users or groups you want to add.
  6. Repeat with any other users you want to add.
  7. Click Save to save your changes.