Default User Groups

The provisioning system provides three default user groups after installation: admin, registered, and universal. Default user groups cannot be deleted and cannot have their names changed.

admin User Group

The provisioning system provides the admin user group after installation to allow initial system configuration. This user group is designed for administrators of the provisioning system.

Members of the admin user group have all permissions on all objects in the provisioning system and can modify an object whether or not they own it.

Members of the admin user group perform many functions.

• setting up hosts

• adding new user accounts and user groups

• setting permissions of user groups

• creating folders for user groups

• importing plug-ins

The admin user group comes with one default user, the admin user. However, if you have more than one administrator of the provisioning system, you can add other users to the admin user group.

Since the admin user group has complete control over all aspects of the provisioning system, be careful when assigning users to this group.

For more information about the admin user, see Default User Account.

For more information about creating new users, see How to Create User Accounts.

registered User Group

The registered user group consists of all users that have been created in the provisioning system.

registered User Group Characteristics

• Every user is a member of the registered user group, and members cannot be removed.

• Read permissions for all objects are granted to the user group.

  Read permissions cannot be revoked.

• New permissions can be assigned to the user group.

  The affect of granting a permission to the registered group is to allow all users in the system to perform the associated action.

• Although all users are assigned to the registered user group, this user group will not display in a user's user group list.

universal User Group

The universal user group includes all users. By default, no permissions are granted to this group. However, new permissions can be granted, which has the affect of allowing anyone to perform the associated operation. The registered group may not be removed as a child of this group.