You can group users and other entries in the directory using a static group entry.
A static group entry contains a list of the group members. After you set up a static group, applications that query the directory can check if an entry is in a group, and use that information to set permissions for that entry.
If you want to set permissions and other configuration on an entry's access to the directory itself, you can extend the group to work as a role. You can then set permissions and limits for the role, and these apply to all of the role's members.
Copyright © 2009 CA. All rights reserved. | Email CA about this topic |