Jump to content
Sign in to follow this  
support

Local Security Groups vs Active Directory Security Groups

Recommended Posts

Purpose:

This post describes what Local and AD Security groups are.

 

Security Groups can be used for two things: 

  1. Adding in new users from Active Directory easily
  2. Automating the management of permissions on Folders or Password Lists.

 

Under Administration -> Security Groups you have two options if you are using the Active Directory integrated version of Passwordstate.  "Add a Local Security Group" and "Add AD Security Group".  If you have installed the forms based version of Passwordstate, you will not see the Add AD Security Group option.  The two different type of security groups have a different icon associated with them for easier reference:

 

2016-05-09_14-37-28.png

 

 

If you create a Local Security Group, you have the ability to add existing members of Passwordstate into it.  If you add an AD Security Group, you will be asked to select a Security Group out of Active Directory, and Passwordstate will synchronize the members from AD into Passwordstate.  This will allow these members to log into Passwordstate and begin using the software. The Synchronization schedule is set under Administration -> System Settings -> Active Directory Options.

 

Now that you have added in some Security Groups, you can now apply them to Password Lists or Folders to give those users access to the content.

 

Password Lists:

Select the Password List, click List Administrator Actions and View Password List Permissions -> Grant New Permissions.  Use the search to find your Security Group, and then grant them the appropriate access you desire. 

 

2016-05-09_15-22-42.png

 

 

Folders:

You must have the option to manually manage Folder permissions otherwise folder permissions will  automatically grant access based on the permissions from any nested Password List. This setting can be turned on under Administration -> System Settings -> Folder Options:

 

2016-05-09_15-26-27.png

 

Now you can select a Folder, choose Folder Properties -> ensure "Manage permissions manually for this folder" is selected, and click View Permissions.  You can now apply permissions the same way you do with Password Lists.

 

2016-05-09_15-28-04.png

 

 

 

 

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...
Sign in to follow this  

×
×
  • Create New...