About Groups
A Group describes a set of CentraSite users. The group always belongs to exactly one organization, but can contain users from different organizations. Groups are visible to all users.
A group can either be managed locally within CentraSite or can be imported from the external authentication system.
Groups can be used for many purposes within CentraSite, including:
Granting roles to specified groups of users.
Granting instance-based permissions to specified groups of users.
Identifying the set of users who can approve certain types of requests.
Identifying the users to which a particular policy action is to be applied.
CentraSite has three main types of groups:
System groups are shipped with
CentraSite. When a user is added to
CentraSite,
CentraSite automatically adds the user to a specified system group depending on the organization to which the user belongs. And when the user is deleted,
CentraSite automatically removes that user from the group. The membership of these groups cannot be manually updated or deleted by an administrator. For more information, see
System Groups.
Locally managed custom groups are user-defined groups that are defined and maintained within
CentraSite.
Externally managed custom groups are user-defined groups that are imported from the external authentication system.
