Jump to content

Local Security Groups vs Active Directory Security Groups


support

Recommended Posts

Purpose:

This post describes what Local and AD Security groups are.

 

Security Groups can be used for two things: 

  1. Adding in new users from Active Directory easily
  2. Automating the management of permissions on Folders or Password Lists.

 

Under Administration -> Security Groups you have two options if you are using the Active Directory integrated version of Passwordstate.  "Add a Local Security Group" and "Add AD Security Group".  If you have installed the forms based version of Passwordstate, you will not see the Add AD Security Group option.  The two different type of security groups have a different icon associated with them for easier reference:

 

2016-05-09_14-37-28.png

 

 

If you create a Local Security Group, you have the ability to add existing members of Passwordstate into it.  If you add an AD Security Group, you will be asked to select a Security Group out of Active Directory, and Passwordstate will synchronize the members from AD into Passwordstate.  This will allow these members to log into Passwordstate and begin using the software. The Synchronization schedule is set under Administration -> System Settings -> Active Directory Options.

 

Now that you have added in some Security Groups, you can now apply them to Password Lists or Folders to give those users access to the content.

 

Password Lists:

Select the Password List, click List Administrator Actions and View Password List Permissions -> Grant New Permissions.  Use the search to find your Security Group, and then grant them the appropriate access you desire. 

 

2016-05-09_15-22-42.png

 

 

Folders:

You must have the option to manually manage Folder permissions otherwise folder permissions will  automatically grant access based on the permissions from any nested Password List. This setting can be turned on under Administration -> System Settings -> Folder Options:

 

2016-05-09_15-26-27.png

 

Now you can select a Folder, choose Folder Properties -> ensure "Manage permissions manually for this folder" is selected, and click View Permissions.  You can now apply permissions the same way you do with Password Lists.

 

2016-05-09_15-28-04.png

 

 

 

 

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...