Dell SMA 200, Administration Manual

Page: 383 / 514

Dell SonicWALL Secure Mobile Access 8.5
Administration Guide
383
• Group Configuration for Active Directory and RADIUS Domains on page 409
• Creating a Citrix Bookmark for a Local Group on page 410
• Creating a Citrix Bookmark for a Local Group on page 410
For a description of global settings for local groups, see Global Configuration on page 413 .
Users > Local Groups Overview
The Users > Local Groups page allows the administrator to add and configure groups for granular control of
user access by specifying a group name and domain.
Note that a group is automatically created when you create a domain. You can create domains in the Portals >
Domains page. You can also create a group directly from the Users > Local Groups page.
Figure 59. Users > Local Groups Page
Group memberships are split into two groups, ‘primary’ and ‘additional’.
Primary groups - Used to assign simple policies, such as timeouts and the ability to add/edit bookmarks.
Advanced policies, such as URL or network object policies, might come from primary or additional groups.
Additional Groups - Multiple additional groups could be assigned, but in the case of conflicting policies, the
primary group takes precedence over any additional groups.
Keep in mind that users can only belong to groups within a single domain.
Deleting a Group
To delete a group, click the delete icon in the row for the group that you wish to remove in the Local
Groups table on the Users > Local Groups page. The deleted group no longer appears in the list of defined
groups.
Adding a New Group
Note that a group is automatically created when you create a domain. You can create domains in the Portals >
Domains page. You can also create a group directly from the Users > Local Groups page.
The Users > Local Groups window contains two default objects:
NOTE: A group cannot be deleted if users have been added to the group or if the group is the default
group created for an authentication domain. To delete a group that is the default group for an
authentication domain, delete the corresponding domain (you cannot delete the group in the
Edit Group
Settings window). If the group is not the default group for an authentication domain, first delete all users
in the group. Then you are able to delete the group on the Edit Group Settings page.