Previous Topic: Managing UsersNext Topic: Managing Access to Objects


Managing Local Groups

Users are added to groups to simplify managing user access. Groups are then provided different types of access on the grid ACL, and may also be provided different types of access on other objects (catalogs and applications).

A group is created using the group create command. When a local group is created it is assigned a unique ID, and an entry for that group is created in the local directory service. Local group members can include local users, global users, local groups, and global groups.

Global group membership information is cached when a global user authenticates in CA AppLogic®. In this case, the user's global group membership is recursively determined and this membership information is cached in the local directory service. As a result, the cached global group membership includes only global users.

For more information about the group related commands, see Group Management.