Group Policies
Users assigned to a group are granted access from the group’s policies in addition to their own granted granular policies.
Figure 18: Group Policies
For example, suppose a user has edit permissions for subscriptions, workspaces, and libraries. In addition, they are a member of the “developer” group. The “developer” group has edit permissions for users, groups, and workspaces. In total, this user has permissions for subscriptions, workspaces, libraries, users, and groups. Now imagine the user is no longer an active “developer” and is taken off the group. The user would then have a total set of edit permissions for subscriptions, workspaces, and libraries. Notice that the user retained the edit permissions for workspaces because it was granted to them via granular policies.
Adding Policies to Group Policies
- Click on the name of a group to arrive at group association editor page.
- Click on the “Add Association” button to open the additional edit permissions modal prompt.
- Fill out the prompt. Delete any unnecessary permissons from the group association editor page.
Figure 19: Group Policies - Adding Associations