Endpoint Administration Guide for UNIX › Managing Users and Groups › Database Accessors › How CA ControlMinder Uses Profile Groups to Determine User Properties

How CA ControlMinder Uses Profile Groups to Determine User Properties

The following process describes how CA ControlMinder uses profile groups to determine user properties:

1. CA ControlMinder checks if the user's record in the USER or XUSER class has a value for the property.

   If the user's record has a value for the property, CA ControlMinder uses that value.

2. CA ControlMinder checks if the user is assigned to a profile group.

   If the user is assigned to a profile group, the process continues. If the user is not assigned to a profile group, CA ControlMinder assigns the default property value to the user.

3. CA ControlMinder checks if the profile group has a value for that property.

   If the profile group has a value for the property, CA ControlMinder assigns that value to the user. If the profile group does not have a value for the property, CA ControlMinder assigns the default property value to the user.

   Note: If the audit property of a user or profile group is not set, the audit property of a group can affect the audit property of a user.

More information:

How CA ControlMinder Determines the Audit Mode for a User