About User Groups
A User Group allows a set of Users to share common settings, such as type of internet access, connection authentication mode, access control, and so on.
A User Group allows a set of Users to share common settings, such as type of internet access, connection authentication mode, access control, and so on.
User Groups facilitate a means to differentiate between sets of Users that need a different configuration. All new Users are added to an existing User Group called Default.
A User Group allows for a set of Users to share common settings as it pertains to:
Allowable Regions that the Users in this group can connect to. Refer to Restrict the User to connect to a specific set of Regions.
The kind of authentication needed to establish a connection. Refer to Set a User's connection authentication policy.
The maximum Devices a User belonging in this group can use to access your WPC. Restrict the number of Devices per User
The mode of internet traffic routing. Refer to Set the Internet Access method for a User
The specific Networks, Hosts, Applications and IP Services they need access to. Refer to About Access Groups.
The required device posture attributes to connect and stay connected. Refer to About Device Posture.
The required location context. Refer to About Location Context Policy.
Some common examples of User Groups usage are listed below:
To provide role-based access controls to Users, User Groups such as Management, Employee, and Contractors can be created.
To provide department-based access controls, User Groups such as Finance, IT, HR can be created
A User Group can be created to constrain the set of available Regions, locations, and device attributes for connection
A User Group can be created to differentiate based on the type of Internet Access, Access Controls, Authentication type, and the number of maximum Devices allowed per User.
User attributes maintained in your LDAP server or Identity Provider to identify department, role, or other group information can be mapped to User Groups defined in CloudConnexa. Refer to Set LDAP User Group Mapping Rules and Set SAML Single Sign-On User Group Mapping Rules.