Configure Group-Specific Settings

Use group subconfigurations to apply settings to all members of a specified group.

To configure group-specific settings

  1. Start the server console, and then click Configuration.
  2. Under Subconfiguration, click Group Configuration.
  3. Click Add.
  4. If you are configuring group access to SFTP directories or mapped drives, specify how to handle situations in which a user belongs to multiple groups.

    To

    Select

    Apply only one group subconfiguration to each user (the default).

    Select Use first applicable group. If a user is a member of multiple groups, the server applies the settings for the group with highest priority. (To give a group higher priority, move it higher in the list of group configurations.)

    Apply all applicable group subconfigurations to each user.

    Select Use all applicable groups. If a user is a member of multiple groups, the user has access to all directories and drives defined for these groups.

    This option applies only to SFTP Directories and Mapped Drives. For all other settings, only one group configuration can be applied to any given user.

    If you select this option, it's a good idea to use unique virtual directory names in all of your subconfigurations. To see how the server handles conflicts when the same virtual directory name is configured in more than one applicable subconfiguration, see Inheritance Rules for Group Subconfigurations.

  5. Specify the group type (Local or Domain).
  6. In the Group box, type the name of the group.
  7. Click any of the available panels and modify the settings you want to apply to this group.

    Note: When you change a setting in a subconfiguration panel, a blue asterisk appears next to that setting (non-inherited setting icon (asterisk)). This indicates that the setting is no longer inherited from the global configuration. If you change the value of a non-inherited setting to match the inherited value, it does not return the setting to the inherited state. Use Reload inherited settings to return pane settings to their inherited state.

  8. Click OK.
  9. Save your settings (File > Save Settings).

 

Notes:

  • To ensure a greater degree of security, it is advisable to configure global settings that are more restrictive than group settings. With this model, you use group settings to increase, rather than decrease, access. Doing this helps to ensure settings that are more restrictive for a user whose group membership cannot be determined.
  • You can determine which group subconfiguration currently applies to a given user. To do this go to Subconfiguration > User Configuration > Add. In the User Configuration dialog box, specify the user name and click Display Groups.

Related Topics

Subconfiguration Overview

Revert settings to inherited values

Inheritance Rules for Group Subconfigurations

User Configuration Dialog Box