Groups
The Groups page in the Admin Web UI provides a central interface to manage user groups. From here, you can view group details, create new groups, edit group settings, and search for specific groups.
👥 Group table overview
When you open the Groups page, you'll see a table listing configured user groups. This table includes:
Group: The user group name. Blocked groups are visually highlighted.
Users in Group: The number of users assigned to this group.
Role: Indicates if the users in this group are admins or standard users.
Auto-login: Shows if auto-login is turned on for users in the group.
Authentication: Lists the authentication method assigned to users in the group.
MFA: Displays whether multi-factor authentication is enabled.
Each row also includes:
✏️ Edit Button: Quickly edit basic account settings.
⋮ More Button: Access additional actions, including:
Edit
Block/Unblock
Delete
Set as Default
🔍 Search and filter
At the top of the page, you can search by group name or use filters to narrow down the list:
Filter by Role: Admin or User.
Filter by Auto-login: On or Off
These tools make it easy to manage large user bases.
⚙️ Customize table view
Click the Table Settings icon to:
Reorder columns (e.g., move MFA before Role).
Hide any fields you don't need to see.
Your table layout will stay consistent until you change it again.
➕ Add new group
Use the Add new group button at the top of the page to create a new user group. You’ll be prompted to enter the group name before proceeding to the detailed user group setup page.
Single Group Page
Clicking a user group from the Groups page opens the Single Group view, where you can manage that specific user group's settings, access permissions, users, and connectivity options.
This page is organized into five tabs:
Group Settings
Users
Access Rules
Intergroup Connectivity
Client Scripting
Note
Some settings inherit their values from the default user or group configuration. These appear dimmed and can't be edited unless you uncheck Use default setting or inherit from group setting to override the setting.
👥Group Settings
This tab contains configuration options grouped into three sections:
Permissions
Group role: Choose between Admin and User.
Allow Auto-login: Enable or disable auto-login for users in this group.
Authentication
Auth method: Displays the authentication method used (e.g., Local, LDAP, RADIUS, SAML).
Require MFA: Toggle whether the user must use multi-factor authentication.
Networking
VPN IP addresses: Define subnets for users in this group for allocating IP addresses.
👤 Users
This tab displays the users attached to this group with search, filter, and table view customization similar to the Groups page. Here you can do the following:
Click Add New User to create a new user account assigned to this group.
Click Add Existing User to attach an existing user to this group.
Click a specific user's username to open the Single User page.
View all users attached to this group.
🚪 Access Rules
This tab lists any group-specific Access Rules that override the global defaults.
Use the New Access Rule button to define new routing, NAT, or restriction rules specific to this user.
Existing rules can be edited or deleted directly from the table.
🔁 Intergroup Connectivity
This tab lets you define how members of this group can communicate with other users and groups over the VPN.
You can create new rules to allow secure communication in specific directions:
One-way connectivity: Allows this group to initiate connections to another user or group, but not the other way around.
Two-way connectivity: Allows full, bidirectional communication between this group and another group.
To add a new rule, click New Integroup Rule and choose the destination (user or group) and direction of communication. If no rules are configured, the tab displays the message: "No intergroup connectivity rules found."
📜 Client Scripting
This tab allows you to configure custom scripts and environment variables that run on client devices when users in this group connect to or disconnect from the VPN. You can define separate settings for Windows and macOS clients.
Windows environmental variables: Specify environment variables to be set on the client during the VPN session. Each variable requires a name and a value.
Windows scripts: Define a user connect script—runs automatically on the user's Windows machine when a VPN connection is established—or a user disconnect script—runs when the user disconnects from the VPN.
Mac environmental variables: Similar to Windows, you can define key-value environment variables for macOS clients.
Mac scripts: Define a user connect script—runs automatically on the user's macOS machine when a VPN connection is established—or a user disconnect script—runs when the user disconnects from the VPN.
Important
The OpenVPN client must support scripts and environment variables in use (e.g., OpenVPN Connect). Script behavior may vary depending on client OS permissions and user configuration.