Skip to main content
Version: I2024.1.3

Assigning Roles to Directory Groups

You can assign AtScale roles to directory groups, so that you can grant roles to multiple users at a time.

About this task

When you are managing users by means of an external directory service, such as an LDAP server, the users are assigned to groups in that directory service. By mapping groups directly to roles, you can prevent a large amount of administrative overhead costs that would accrue from access for individual users.

Of course, it is still possible to grant roles to individual users who are being managed through directory groups. When those users log into AtScale, their account information is synchronized with AtScale's records. You can assign additional roles to individual users, overriding the assignment they were given because of their membership in a group. However, if their account information is changed in the external directory service, the overrides are removed and the role assignments revert to the roles assigned to the groups that the individual users are members of.

Before you begin

Procedure

  1. Choose Security from the main navigation.
  2. Click Mappings.
  3. In the section Directory Group to Role Mappings, add the mappings that you need.