Creating security groups

You can create security groups and edit group membership. You can also set the properties of database management groups, that is the database permissions that users gain through membership of one or more database management groups.

About this task

All groups have users as members. A particular user can be a member of any number of groups, of any types. The user gains the properties defined for all the groups of which they are a member.

For details of the group types, see Managing security.
Note: Data Access Control and Folder Object Control groups have a part of their definitions in a database. These parts and their relationships to security groups are not preserved when you create a template from a database. However, the groups are still available in the security file, so you can recreate any settings required in a newly created database, based on that template.

Procedure

To create a group:
  1. Select Security > Security Manager.
  2. Click the Groups tab, and do one of the following:
    • Click New.
    • Select an existing group and click Edit.
  3. In the Group dialog, select a type from the Group Type list.
    For details of these groups, see Managing security.
    Note: The Data Access Control type is only available if Extended Access Control is enabled.
  4. Enter a Name for the group, up to 50 characters.
  5. If you are defining a Database Management group, set the permissions by selecting the checkboxes for the desired permissions. See Checking user permissions for a description of the permissions.
  6. If you want to set the membership for the group, click the Users tab and select the checkboxes for users you want to add.
    If there are a large number of users, you might find it useful to:
    • Display the users who do not belong to the group by turning on the Show Unselected Items Only checkbox.
    • Add all users to the group by clicking Select All.
    • Remove all users from the group by clicking Clear All.
  7. Click OK to create the new group.
  8. If you have created a System Commands Access Control group or a Data Access Control group, define the security for the group. For details, see Setting up System Commands Access Control groups or Setting up Data Access Control groups.