In addition to creating multiple groups for a user, you can nest groups (have a group that contains other groups) for additional flexibility in mapping how your organization typically works.
For example, a corporate division has a certain set of assets associated with it, such as being able to read management console records. Additional departments (such as personnel, payroll, and mailroom) also have special authorities. You can use nested user groups to give the departments automatic access to the corporate assets.
By making each of these departments a group within the corporate group, each department has access to their assets and any assets defined to corporate. They do not, however, have access to the assets permitted specifically to the other departments.
You can apply as many levels of nesting as you want. If, in addition to the corporate and department groups, you also have a company group, you can make the departments a member of corporate, and corporate a member of the company. Permissions apply as described in the following list:
|
Copyright © 2010 CA.
All rights reserved.
|
|