Using subconfigurations, you can apply settings to particular users and/or groups. Subconfiguration information is saved in the .
The server uses the following logic to apply subconfiguration settings.
- Global settings apply to any user who does not match a configured user or group subconfiguration.
- Group-specific settings override global settings.
- User-specific settings override both global and group settings.
- You can specify whether access to SFTP accessible directories is inherited by groups and users. For all other settings, users always inherit any applicable group settings, and, when no group settings apply, users inherit the global settings.
- Only one group subconfiguration can be applied to any given user. You can use the Inheritance options from the User Configuration dialog box to determine which group subconfiguration currently applies to a given user. You can control group precedence by changing the list order in the Group Configuration pane.
- To ensure a greater degree of security, it is advisable to configure global settings that are more restrictive than group settings. With this model, you use group settings to increase, rather than decrease, access. Doing this helps to ensure settings that are more restrictive for a user whose group membership cannot be determined.