Assigning Accounts to User Groups and UI Groups
User accounts must be assigned to groups to gain access to tools and menus.
Before you begin
About this task
All users are initially assigned to the Everyone group. They must be added to additional groups to inherit the permissions associated with those groups. If a user is granted permission to a tool or function because of membership in a group, you can deny that permission by specifying it directly for the user.
Note that the following is true:
- User groups can be assigned to user groups.
- If a permission is not explicitly denied or granted, the permission is set to None, and
permission is not granted.
A red X is visible.
- If a permission is both denied and granted, the permission is typically granted regardless of the group hierarchy. This is because the system will try to deny the permission in the cleanest possible way. It will first check to see if it can remove the permission entirely for the group where it is being denied. If it can, then the permission level is set to None and the level for other groups associated with the user are applied (that is, if the second group has the permission set to granted, the permission is granted because it has been reset to None in the first group). To override this setting, deny permission directly to the user account.
Procedure
- Select the user or group to modify.
-
Click the Edit button:
-
Click Membership.
The Membership List in the left-side pane lists the groups to which the selected user or group belongs; the Group List in the right pane lists the groups to which the user or group can be added.
-
Do one or both of the following:
To Do this Add a user or group to the group
Select the user or group in the right pane and click the < button. Remove a user or group from the group Select the user or group in the left pane and click the > button.
-
Click the Save button:
