Jump to content
Sign in to follow this  
support

Local Security Groups vs Active Directory Security Groups

Recommended Posts

Purpose:

This post describes what Local and AD Security groups are.

 

Security Groups can be used for two things: 

  1. Adding in new users from Active Directory easily
  2. Automating the management of permissions on Folders or Password Lists.

 

Under Administration -> Security Groups you have two options if you are using the Active Directory integrated version of Passwordstate.  "Add a Local Security Group" and "Add AD Security Group".  If you have installed the forms based version of Passwordstate, you will not see the Add AD Security Group option.  The two different type of security groups have a different icon associated with them for easier reference:

 

2016-05-09_14-37-28.png

 

 

If you create a Local Security Group, you have the ability to add existing members of Passwordstate into it.  If you add an AD Security Group, you will be asked to select a Security Group out of Active Directory, and Passwordstate will synchronize the members from AD into Passwordstate.  This will allow these members to log into Passwordstate and begin using the software. The Synchronization schedule is set under Administration -> System Settings -> Active Directory Options.

 

Now that you have added in some Security Groups, you can now apply them to Password Lists or Folders to give those users access to the content.

 

Password Lists:

Select the Password List, click List Administrator Actions and View Password List Permissions -> Grant New Permissions.  Use the search to find your Security Group, and then grant them the appropriate access you desire. 

 

2016-05-09_15-22-42.png

 

 

Folders:

You must have the option to manually manage Folder permissions otherwise folder permissions will  automatically grant access based on the permissions from any nested Password List. This setting can be turned on under Administration -> System Settings -> Folder Options:

 

2016-05-09_15-26-27.png

 

Now you can select a Folder, choose Folder Properties -> ensure "Manage permissions manually for this folder" is selected, and click View Permissions.  You can now apply permissions the same way you do with Password Lists.

 

2016-05-09_15-28-04.png

 

 

 

 

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this  

×