User Group

Scenarios

A user group includes multiple users. You can authorize users in batches by authorizing the corresponding user group. For details, see Creating an ACL Rule.

A user group is associated with a department and does not belong to an individual. A user with the user group management permission in a department can view information about all user groups of the same department and its lower-level departments. However, the user cannot view information about user groups of its superior department.

Notes and Constraints

• The administrator of a superior department can add a user in the superior department to a user group in a lower-level department.
• If you have the permissions for the User Group module, you can view details about the user group in your department. However, for the user groups in the superior department, you can view only the user list of the user group.
• If you have permissions for the User Group module, you can remove a user of a superior department out of a user group. However, as a user in a lower-level department, you have no permissions to add those removed users back to the user group.
• A user can be added to multiple user groups.
• When you create a user group, it automatically belongs to your department by default. For details about how to modify a department, see Viewing or Modifying Basic Information and Members of a User Group.

Prerequisites

Your role has the management permission for the User Group module. For details about how to check the permissions of each role, see Role.

Creating a User Group

1. Log in to your bastion host system.
2. In the navigation pane on the left, choose User > User Group to go to the user group list page.
3. Click New. In the displayed dialog box, configure user group information.

   Table 1 Creating a user group

   Parameter	Description
   User Group	The name you specify for the user group. This name must be unique in your bastion host system. It can contain 1 to 64 characters. Only letters, digits, and hyphens (-) are allowed.
   Remarks	(Optional) A brief description of the user group. A maximum of 128 characters can be entered.

4. Click OK.

   Return to the user group list page. You can view the new user group. You also need to add users to the user group. For details, see Adding a Member to or Removing a Member from a User Group.

Adding a Member to or Removing a Member from a User Group

1. Log in to your bastion host system.
2. In the navigation pane on the left, choose User > User Group to go to the user group list page.

3. In the Operation column of the target user group, click Member.
4. In the configuration window, add or remove a user.
5. Click OK.

Viewing or Modifying Basic Information and Members of a User Group

1. Log in to your bastion host system.
2. In the navigation pane on the left, choose User > User Group to go to the user group list page.
3. Click the name of the target user group, or click Manage in the Operation column of the target user group to go to the user group details page.
4. View or modify the basic information about the user group.
   Figure 1 Basic user group information
   
   • In the Basic Info area, view the name, department, and description of the user group.
   • In the Basic Info area, click Edit on the right to modify the name, department, and description of the user group.

5. View or modify the members of the user group.
   Figure 2 User group member information
   
   • In the Members area, view the list of resource accounts in the current user group.
   • In the Members area, click Edit on the right to add users to the user group.
   • In the user list below the Members area, click Remove to remove a user from the current user group.

Deleting a User Group

After a user group is deleted, the resource permissions the group members have been granted through the user group become invalid.

1. Log in to your bastion host system.
2. In the navigation pane on the left, choose User > User Group to go to the user group list page.
3. Delete any user groups that you no longer need.
   • Deleting a user group
     1. Click Delete in the Operation column of the target user group.
     2. In the displayed dialog box, click OK.
   • Batch deleting user groups
     1. In the user group list, select multiple user groups.
     2. Click Delete in the lower left corner.
     3. In the displayed dialog box, click OK.