3.1.4 Managing User Groups

User groups are seeded (available out-of-the-box) by the cloud service. Groups are mapped to roles using the cloud service by the same user that was created using IAM.

Administrators can also create new groups in IAM. After groups are created, they are synced from IAM to the cloud service. You can map the groups to roles using the subscribed cloud service.

For the complete list of Out-of-the-Box (OOTB) user groups available across all PBSM Cloud Services, see Appendix A: OOTB User Groups.

• Map Application to the User Groups
  After creating a group, you can map the required applications with the group.
• Map Users to Groups
  Log in to IAM as an administrator, and map users to user groups.
• Map Roles to User Group
  You can map roles to a user group using Admin Console.
• Unmap User from Groups
  Unmap a user from a specific group to revoke the associated functions.