Permissions set examples

The following examples show how the permissions are determined for a session that involves the following entities.

4 user groups U1 – U4

5 target groups T1 – T5

Users X and Y

Targets A and B

The following steps create the users, targets, user groups, and target groups that are used in the examples. The examples show how policies and permissions are derived for a session.

1. Create users X and Y.
   1. Click Users > New.
   2. Enter relevant details for user X and click Submit.
   3. Repeat the steps to create user Y.

2. Create the required user group U1 to U4.
   1. Click User groups > New user group.
   2. Type in the group name. For example, U1.
   3. Click Submit to accept the default template.
   4. Repeat the steps to create groups U2, U3, and U4.
3. Assign user or user group members to the user group.
   • Make user X a member of group U3.
     1. Click Users > Search.
     2. Type in the user ID or some other relevant information for user X.
     3. Select user X and click Manage Group Membership.
     4. In the user group list, select U3 then click Submit.
        Note: Make sure that U3 is the only user group that is selected.

   • Make user Y a member of group U4
     1. Click Users.
     2. Click Search then type in the user ID or some other relevant information for user Y.
     3. Select user Y then click Manage Group Membership.
     4. In the user group list, select U4 then click Submit.
        Note: Make sure that U4 is the only user group that is selected.

   • Make groups U3 and U4 members of U2
     1. Click User groups.
     2. Click Search then type in U.
     3. Click Submit.
     4. Select U3 and U4 then click Manage Group Membership.
     5. In the user group list, select U2.
        Note: Make sure that U2 is the only user group that is selected.
     6. Select add to current group membership.
     7. Click Submit.

   • Make U2 a member of U1
     1. Click User groups.
     2. Click Search then type in U2.
     3. Click Submit.
     4. Select U2 then click Manage Group Membership.
     5. In the user group list, select U1 then click Submit.

4. Create the required target groups T1 to T5
   1. Click Target groups > New target group.
   2. Type in the group name. For example, T1.
   3. Click Submit to accept the default template.
   4. Repeat the steps to create groups T2,T3,T4, and T5.
5. After the target software is installed on target A and target B and the targets contact the server, assign target or target group members to target groups.
   • Make target A a member of group T4
     1. Click Targets.
     2. Click Search then type in the serial number or some other relevant information for target A.
     3. Select target A then click Manage Group Membership.
     4. In the target group list, select T4 then click Submit.
        Note: Make sure that T4 is the only target group that is selected.

   • Make target B a member of group T5
     1. Click Targets.
     2. Click Search then type in the serial number or some other relevant information for target B.
     3. Select target B then click Manage Group Membership.
     4. In the target group list, select T5 then click Submit.
        Note: Make sure that T5 is the only target group that is selected.

   • Make group T4 and T5 members of T2
     1. Click Target groups.
     2. Click Search then type in T.
     3. Click Submit.
     4. Select T4 and T5 then click Manage Group membership.
     5. In the target group list, select T2.
        Note: Make sure that T2 is the only target group that is selected.
     6. Select add to current group membership.
     7. Click Submit.

   • Make T2 and T3 members of T1
     1. Click Target groups.
     2. Click Search then type in T.
     3. Click Submit.
     4. Select T2 and T3 then click Manage Group Membership.
     5. In the target group list, select T1.
        Note: Make sure that T1 is the only target group that is selected.
     6. Select add to current group membership.
     7. Click Submit.
6. Create permissions links between specific user and target groups. Remembering to enable all relevant policies. Create the links in the following examples.

The following figure shows the group hierarchy that is created.