Sample Scenario Using Groups

Connector Guides › Connectors Guide › Connecting to Endpoints › CA Access Control Connector › Connector-Specific Features › Associating ACC Account Templates with Endpoints › Sample Scenario Using Groups

This sample scenario uses groups to illustrate the intersection requirement. At the beginning of this scenario, the following are true:

Groups 1 through 4 exist in the Endpoint 1.
Group 1 and Group 4 exist in Endpoint 2.
Account Template 1 is not associated to any endpoints.

The following table illustrates this setup:

Endpoint 1	Endpoint 2	Account Template 1
Group 1	Group 1	(none)
Group 2
Group 3
	Group 4

Suppose you perform the following steps:

Associate Endpoint 1 with Account Template 1, creating the first endpoint association for Account Template 1.

Endpoint 1	Endpoint 2	Account Template 1
Group 1	Group 1	+ Endpoint 1 (succeeds)
Group 2
Group 3
	Group 4

Select Group 1 and Group 2 for Account Template 1. The selection succeeds because these groups exist in Endpoint 1.

Endpoint 1	Endpoint 2	Account Template 1
Group 1	Group 1	Endpoint 1
Group 2		+ Group 1 (succeeds)
Group 3		+ Group 2 (succeeds)
	Group 4

Attempt to associate Endpoint 2 with Account Template 1. The attempt fails because one of the account template's selected groups, Group 2, does not exist in Endpoint 2.

Endpoint 1	Endpoint 2	Account Template 1
Group 1	Group 1	Endpoint1
Group 2		Group 1
Group 3		Group 2
	Group 4	+ Endpoint 2 (fails)

When the attempt fails, the Manager displays an error message similar to the following one:

	Resources not found

Endpoint 2 is not necessarily required to contain the same groups as Endpoint 1. However, Endpoint 2 must contain all groups from Endpoint 1 that have already been selected for Account Template 1. In other words, for any new endpoint that you want to associate with an account template, all previously selected groups for the account template must exist in the new endpoint.