Create and manage user groups

User groups streamline the administration of users with common settings or permissions. Any groups can be defined at TightGate-Pro and then individual users can be assigned to these groups. Working with user groups is done as an administrator maint under the menu item Group administration.

User groups at TightGate-Pro are only used for the simultaneous configuration of several user accounts; settings made via these are always transferred to the individual user accounts. User groups do not act as templates for authorisation records that are bound to the group property. This means, for example, that permissions granted via a group remain with the user accounts concerned, even if the group is subsequently deleted. Group permissions can be overwritten by a subsequent individual configuration and vice versa. In principle, the last configuration of a user account remains valid, regardless of how it was set. It is therefore recommended to follow a graduated procedure from system-wide settings via group settings to individual configuration of user accounts in order to avoid configuration errors.

The functionality of the group administration is described below:

• Create group and assign group name is done via New group. If a group is no longer needed, it can be deleted via the menu item Remove group.
  Attention: After deleting a group, the group permissions on the contained user accounts are retained! If this behaviour is undesirable, the permissions should first be changed as desired in the group for all included user accounts before the group is deleted.

• Addusers: Via the menu item Users in group - any number of users can be added to a group. The reverse procedure can also be followed via the menu item Group to user.

• Assign rights: Once the users have been assigned to the groups, rights can be assigned to the group (and thus to all users belonging to it) as desired. For this purpose, there is the option of editing user groups in most of the menu options in which the properties of individual user accounts can be edited.

• Copy group memberships: If members of a group are to be copied into another group, this is possible via the menu item Copy memberships. First the target group is selected, then the source group. After selecting the source group, a list of all identifiers in the source group opens from which the identifiers to be copied can be selected. Once the selection is complete, it is confirmed with OK and the copying is carried out automatically.

Special case lock groups
In TightGate-Pro it is possible to create a number of predefined groups as administrator config under the menu item System Preferences > Transfer MIME Type Groups and to provide them with permissions for the file lock. These groups are primarily intended for user administration via Active Directory, but can also be used in the group administration of TightGate-Pro. By creating lock groups as administrator config they are automatically created in the system. If config creates, for example, 3 transfer MIME type groups, these are available in TightGate-Pro as tgtransfer1, tgtransfer2 and tgtransfer3. The number of groups depends on the specifications as config and always follows the scheme that the number of the group is appended to the prefix tgtransfer → tgtranfer[number]. If the groups were created as config , they can also be created and used as maint .

All settings take effect immediately without a restart.