Policy Server Guides › Policy Server Configuration Guide › User Directories › User Attribute Mapping › Define an Attribute Mapping › Group Name

Group Name

A group name attribute lets you map a common name to the underlying directory schema that identifies whether a user belongs to a specific group. Group name attribute mappings map common names to user attributes that can be read or changed. This type of access is called read/write (RW).

Group name attribute mappings result in a Boolean value. If the user is a member of the specified group, the mapping results in a TRUE value. Otherwise, the result is FALSE.

Group name attribute mapping and user classes, one type of named expression, are similar in the following ways:

• Both are used to determine group membership.
• Both result in a Boolean value.

Group name attribute mapping differs from user classes as follows:

• A group name attribute mapping is defined for particular user directories. User classes are global and can be applied to any user in any user directory.
• A group name attribute mapping can change a user's membership in a group in a user directory. User classes are Boolean expressions and cannot be changed.
• User classes must begin with the "at" sign (@). A group name mapping does not.

Note: For more information about user classes, see the Named Expressions.