Documentation for Crowd 1.2. Documentation for other versions of Crowd is available too.

Within any given directory, you can choose the groups and roles to which each principal (i.e. user) belongs.

Note that a principal's group membership is particularly important, as groups are often used to control access to applications.

What happens if a principal exists in more than one directory?

If the same username exists in more than one directory assigned to an application, Crowd treats these usernames as the same principal. Crowd searches all the assigned directories for the principal, and amalgamates the group and role memberships.

For example, let's assume you have a principal 'P' who exists in both directories 'D1' and 'D2', and is a member of group 'G1' in 'D1' and 'G2' in 'D2'. Crowd will grant access to the principal based on membership of both 'G1' and 'G2'.

(info) When authenticating the principle, Crowd uses the first directory in which the username occurs, as described in 3.3.1 Specifying the Directory Order for an Application.

To add a principal to a group,

  1. Log in to the Crowd Administration Console.
  2. Click the 'Principals' link in the top navigation bar.
  3. This will display the Principal Browser. Select the relevant directory, locate the principal you wish to add, and click the 'View' link that corresponds to the principal.
  4. This will display the 'Principal Details' screen. Click the 'Groups' tab.
  5. A list of the principal's current groups (if any) will be displayed. Select the relevant group from the drop-down box below the list, then click the 'Add' button.

(info) The principal will now be authorised to use any applications that use this group to control access.

To remove a principal from a group,

  1. Log in to the Crowd Administration Console.
  2. Click the 'Principals' link in the top navigation bar.
  3. This will display the Principal Browser. Select the relevant directory, locate the principal you wish to remove, and click the 'View' link that corresponds to the principal.
  4. This will display the 'Principal Details' screen. Click the 'Groups' tab.
  5. A list of the principal's current groups (if any) will be displayed. Click the 'Remove' link corresponding to the relevant group.

(info) The principal will now be unable to log in to any applications that use this group to control access.

Screenshot: 'Principal — Groups' 

 
(info) The adding or removing of a principal to or from a role is performed via the Role Browser, but is otherwise identical to the process for groups.

Related Topics

Crowd 1.2 Documentation  





Except where otherwise noted, content in this space is licensed under a Creative Commons Attribution 2.5 Australia License.