4.7 Editing a Principal's Group and Role Membership

Within any given directory, you can choose the groups and roles to which each principal (user) belongs.

Note that a principal's group membership is particularly important, as groups are often used to control access to applications.

To add a principal to a group,

Login to the Crowd Administration Console.
Click the 'Principals' link in the top navigation bar.
This will display the Principal Browser. Select the relevant directory, locate the principal you wish to deactivate, and click the 'View' link that corresponds to the principal.
This will display the 'Principal Details' screen. Click the 'Groups' tab.
A list of the principal's current groups (if any) will be displayed. Select the relevant group from the drop-down box below the list, then click the 'Add' button.

The principal will now be authorised to use any applications that use this group to control access.

To remove a principal to a group,

Login to the Crowd Administration Console.
Click the 'Principals' link in the top navigation bar.
This will display the Principal Browser. Select the relevant directory, locate the principal you wish to deactivate, and click the 'View' link that corresponds to the principal.
This will display the 'Principal Details' screen. Click the 'Groups' tab.
A list of the principal's current groups (if any) will be displayed. Click the 'Remove' link corresponding to the relevant group.

The principal will now be unable to login to any applications that use this group to control access.

Screenshot: 'Principal — Groups'

The adding or removing of a principal to or from a role is performed via the Role Browser, but is otherwise identical to the process for groups.

Child pages

Related Topics