Previous Topic: Types of GroupsNext Topic: LDAP Filter Query—Define Dynamic Group Query Parameters


Create a Static or a Dynamic Group

You can associate a collection of users in a static group. You manage the group by adding or removing users from the group membership list. To view the members of a group, use the Membership tab in the View or Modify Group tasks.

You create a dynamic group by defining an LDAP filter query using the CA ControlMinder Enterprise Management to determine the group membership at runtime.

Note: The Membership tab displays only the members that are explicitly added to the group. If you use Active Directory as your user store, you cannot create a group in CA ControlMinder Enterprise Management.

Follow these steps:

  1. Log in to CA ControlMinder Enterprise Management as a user with group management privileges.
  2. Click Users and Groups, Groups, Create Group.

    The create group search screen appears.

  3. Select Create a new group and click OK.

    The group profile tab appears.

  4. Enter the Group Name and Group Description.
  5. Click the Membership tab.

    Note: Only an administrator with the Modify Group task can change a group dynamic membership.

  6. Click Add a User.

    The select user search window opens.

  7. Enter the search query and click Search.

    The query returns the results according to the search criteria.

  8. Select a user and click Select.
  9. Click the Administrators tab.
  10. Click Submit.

    A message appears informing you that the process completed successfully.

    Note: When you assign a user as a group administrator, verify that the administrator has a role with appropriate scope for managing the group.