Create groups

Before you begin

Read Manage users and groups and Use roles and policies to secure resources.

Note: When using the WebLogic Server Administration Console, or WLST, you can create groups only in the following databases:

The embedded LDAP server, which is configured with the WebLogic Authentication provider (DefaultAuthenticator)
An RDBMS system that is configured with a valid SQL Authentication provider.

To create groups in other identity stores — for example, any external LDAP server — you must use the tools available with those stores. In addition, if you customize the default security configuration to use a custom Authentication provider, you must use the administration tools supplied by that security provider to create a group. If you are upgrading to the WebLogic Authentication provider, you can load existing users and groups into the embedded LDAP server. For more information, see Migrating Security Data.

To create a group:

In the left pane select Security Realms.
On the Summary of Security Realms page select the name of the realm (for example, myrealm).
On the Settings for Realm Name page select Users and Groups > Groups.
In the Groups table click New.
In the Name field of the Create New Group page, enter the name of the group.
Group names are case insensitive, but must be unique. Oracle recommends using initial capitalization and plural names for groups; for example, Administrators.

Group names must not include any of the following characters:
- Angle brackets — < or >
- Backslashes — \
- Commas — ,
- Equals signs — =
- Forward slashes — /
- Parentheses — ( or )
- Plus signs — +
- Question marks — ?
- Semicolons — ;
- Square brackets — [ or ]
In addition, group names must not begin with either of the following characters:
- Pound sign — #
- Double quotation — "
Optionally, in the Description field, enter a short description of the group (for example, Product Managers for Code Examples).
In the Provider drop-down list, select the Authentication provider for the group.
If multiple Authentication providers are configured in the security realm, they will appear in the list. Select the Authentication provider that corresponds to the database in which the information for the new group is to be stored.
Click OK to save your changes and to display the group name in the Group table.

After you finish

After you create a group, you can add users or make the group a member of another group. See Add users to groups

You can nest groups by adding a group to one or more parent groups. See Add groups to other groups.

Administration Console Online Help

Create groups