Sample Scenario Using Additional Groups

Connector Guides › Connectors Guide › Connecting to Endpoints › CA Access Control Connector › Connector-Specific Features › Associating ACC Account Templates with Endpoints › Sample Scenario Using Additional Groups

A new endpoint that you want to associate to an account template is permitted to contain additional groups; that is, groups that have not been selected for the account template. After you associate the new endpoint to the account template, you may optionally select any of these additional groups for the account template. If you do, these groups are added to the list of required groups that must exist in all new endpoints that you attempt to associate with the account template in the future.

The following scenario illustrates this principle. At the beginning of this scenario, the following are true:

Groups 1 through 4 exist in Endpoint 1
Groups 1 through 3 exist in Endpoint 2
Account Template 1 has no associated endpoints

The following table illustrates this setup:

Endpoint 1	Endpoint 2	Account Template 1
Group 1	Group 1	(none)
Group 2	Group 2
Group 3	Group 3
Group 4

Suppose you perform the following steps:

Associate Endpoint 1 with Account Template 1, creating the first endpoint association for Account Template 1.

Endpoint 1	Endpoint 2	Account Template 1
Group 1	Group 1	+ Endpoint 1 (succeeds)
Group 2	Group 2
Group 3	Group 3
Group 4

Select Group 1 and Group 2 for Account Template 1. The selection succeeds.

Endpoint 1	Endpoint 2	Account Template 1
Group 1	Group 1	Endpoint 1
Group 2	Group 2	+ Group 1 (succeeds)
Group 3	Group 3	+ Group 2 (succeeds)
Group 4

Consequently, any endpoints that you attempt to associate with Account Template 1 in the future must contain Group 1 and Group 2; otherwise, the attempt will fail.

Associate Endpoint 2 with Account Template 1, creating the second endpoint association for Account Template 1. The association succeeds, because all groups already selected for Account Template 1 (Group 1 and Group 2) exist in Endpoint 2.

Endpoint 1	Endpoint 2	Account Template 1
Group 1	Group 1	Endpoint 1
Group 2	Group 2	Group 1
Group 3	Group 3	Group 2
Group 4		+ Endpoint 2 (succeeds)

Select Group 3 for Account Template 1. The selection succeeds.

Endpoint 1	Endpoint 2	Account Template 1
Group 1	Group 1	Endpoint 1
Group 2	Group 2	Group 1
Group 3	Group 3	Group 2
Group 4		Endpoint 2
		+ Group 3 (succeeds)

Consequently, any endpoints that you attempt to associate with Account Template 1 in the future must contain groups Group 1 through Group 3; otherwise, the association will fail.