Creating a Group

To create a group, determine the name of the group, its membership, its feature rights, its privileges, its tags, and its audit events and watermarks. Groups can be created from the Laserfiche Administration Console.

Note: The configuration of audit events on a per-user or per-group basis is only available if you have purchased and enabled the Standard or Advanced edition of Laserfiche Audit Trail. For more information, see Determining which Events are Logged.

Before creating a group, consider that:

By default, the Admin user has sufficient permissions to create a group. The appropriate permissions can also be granted to other users.

The ability to create a group requires the Manage Trustees privilege.
The ability to assign privileges to a group requires the Set Trustee Privileges privilege.
The ability to assign tags to a group requires the Manage Metadata privilege.
The ability to configure auditing and watermark options requires the Manage Audit Settings privilege.

A group name can consist of any combination of letters, numbers, and symbols except the forward slash (/), backslash (\), at symbol (@), or colon (:). Additionally, the dollar sign ($) cannot be the last character in a group name, and the period (.) cannot be the only character in the name.
A group name can have a maximum length of 47 characters.
A group description can have a maximum length of 79 characters.

Desktop Admin
Web Admin

To create a group

Start the Laserfiche Administration Console.
In the console tree, expand the desired Laserfiche Server item.
Select the desired Laserfiche repository.
If security has been enabled on that repository, log in as any user who has been granted the Manage Trustees privilege for the specified repository.
Expand the Users and Groups item.
Click the Groups item.

From the Action menu, select New Group.
On the General tab, specify a name and a description for the group to be created. Show me what this looks like.

In the Description field, you can optionally type a description to store additional information about the group.
Click the Members tab. Select the users that should be assigned to the group and then click Add. Click to view screenshot.

In the Domain trustee linking option, type the domain user or group you want to add or click the Browse... button to search for a user. The format should be "DomainName\UserName" for Windows Accounts, and "Common Name@ServerProfile" for LDAP accounts.

Note: In most cases, it is more efficient to add Windows domain groups directly in the Windows Accounts option. The ability to link a Laserfiche group with a Windows domain group is a legacy feature, provided for users who want to take advantage of Windows group authentication in conjunction with pre-existing Laserfiche groups.

Click the Rights tab. Grant the desired feature rights and privileges to the new group. Show me what this looks like.

Click the Tags tab. Grant the desired security tags to the new group. Click to view screenshot.
Click OK to finish creating the group.

To create a group

Open the web client management page. Sign in as any user who has been granted the Manage Trustees privilege for the specified repository.
Click Users, then select the Groups tab.
Click Add and select whether you want to create a Repository, Windows, or LDAP group.
1. If you choose to add a repository group:
  1. Enter a name and optional description for the group.
  2. Click Choose members to add members to the group. Search for and select the members you want to add, then click OK.
  3. Select whether you want the group to have Read-write privileges or to be a Read-only group.
  4. Click OK to create the group.
2. If you choose to add a Windows or LDAP group:
  1. Under Windows account or LDAP account, enter the name of the Windows or LDAP group you want to add, or click the Search icon to look for the group you want to add.
  2. Under Groups, select which existing groups you want the group you are creating to belong to.
  3. Under Type, select whether you want the group to have Read-write privileges or to be a Read-only group.
  4. Under Authentication, select whether you want the group to have access, to be denied access, or to inherit authentication rights from its group membership.
  5. Click OK to create the group.

Creating a Group

Was this page helpful?