User group access rights

There are two kinds of access rights related to user groups:

• the rights which a user group has to other macro-objects (these rights apply to all the users added to the group);
• the rights which a user has to the user group itself.

You can grant a group the rights to other macro-objects in two ways:

• on the Access tab of the group properties, if the group should get the rights to several objects at once;
• on the Access tab of the properties of a unit, unit group, user, or resource (account), if several groups should get the rights to the same object. To do this, select User groups in the drop-down list above the list of users.

The rights granted to a user group are added to the rights of each user belonging to it. Consider the following:

• A group can extend the access rights of its users, but not limit them. If the user’s own rights and the rights of the group differ, a wider list of rights applies.
• The user’s own rights don’t change when they are added to the group, when the rights of the group change, or when other users are added to the group.
• The rights which the users receive through the group can’t exceed the rights of either the group creator or the user creator.
• When you remove a user from the group or delete the group, the user loses the rights received through the group. Their own rights remain unchanged.

Access rights to a user group allow the user to see this group on different lists, edit its properties, add and remove its users, delete the group, and so on.

You can grant users access rights to a user group in two ways: in the properties of this group or in the properties of the user who should get the rights. In the user properties, select User groups in the filter, mark the required group in the list, and select the rights the user should have to it.

As in the case of other macro-objects, the rights are divided into standard and special ones.