Enterprise Administration Guide › Administering CA Access Control Enterprise Management › Users, Groups, and Administrative Roles › Types of Groups › Create a Static or a Dynamic Group

Create a Static or a Dynamic Group

You can associate a collection of users in a static group. You manage the group by adding or removing users from the group membership list. To view the members of a group, use the Membership tab in the View or Modify Group tasks.

You create a dynamic group by defining an LDAP filter query using the CA Access Control Enterprise Management to determine group membership at runtime.

Note: The Membership tab displays only the members that are explicitly added to the group. If you use Active Directory as your user store, you cannot create a group in CA Access Control Enterprise Management.

To create a static or dynamic group

1. Log into CA Access Control Enterprise Management as a user with group management privileges.
2. Select Groups, Create Group.

   The create group search screen appears.

3. Select to create a group and click OK.

   The group profile tab appears.

4. Enter the group name and description.
5. Navigate to the Membership tab.

   Note: Only an administrator with the Modify Group task can change a group dynamic membership.

6. Click Add a User.

   The select user search window opens.

7. Enter the search query and click Search.

   The query returns the results according to the search criteria.

8. Select a user and click Select.

   Navigate to the Administrators tab.

9. Click Submit.

   A message appears informing you that the process completed successfully.

   Note: When you assign a user as a group administrator, verify that the administrator has a role with appropriate scope for managing the group.