Tutorial: Adding Groups to Access Server
Add user groups in Access Server to allow group-defined access to services and resources.
Overview
This tutorial provides an overview of creating user groups in Access Server.
An installed Access Server.
Admin Web UI access.
Configure your server's authentication before adding any user accounts. The default authentication method is local, where the authentication resides on your server. If you choose this authentication method, you can skip forward to adding new users.
For other authentication methods, refer to the appropriate tutorial:
LDAP tutorial
RADIUS tutorial
SAML tutorial
PAM tutorial
Sign in to the Admin Web UI.
Click Groups.
Click Add new group.
Enter a new Group name and click Save. (Optionally, you can click Add another group to add more than one group.)
The Single Group page is displayed for the new user. (Optionally, if you added multiple users, the Group page displays. Click on individual groups to modify settings.)
Set the group's permissions by promoting them to an admin or allowing auto-login profiles.
Select the group's authentication method.
Tip
You can leave the authentication as the default method or choose a different authentication method by selecting the radio button. If the option is disabled, you must first configure the authentication method before it’s available for users.
Enable MFA if desired.
Define a subnet from which Access Server assigns all group addresses and the range within that subnet.
Caution
If you assign a user a static IP and assign that user to a group with the VPN IP addresses defined, then that IP address must be within the range of the group subnet.
Assign users from the Users tab.
Set up Access Rules and Client Scripting from those tabs.
Click Save for changes made on each tab.