SANGFOR IAM v2.1 User Manual
181
As shown above, there is a built-in group, root group of the [Member List]. The root group cannot
be deleted, and its name cannot be modified. The user-defined groups are subgroups of the root
group.
You can configure the relationship between the groups, inheriting the properties of a group or
belonging to a group, which helps you to distinguish parent group(s) from subgroup(s) and parent
group(s) from user(s). The structure and relations listed are similar to the structure of and relations
in an enterprise.
[Member List]: Displays the subgroup(s) and user(s) of the current root group or subgroup.
[Access Control Policy]: Displays the associated access control policy (policies) of the current
root group, subgroup or user.
[No.]: Sequence number of this member in the current group.
[Type]: Type of the member, group (subgroup) or user.
[Name]: Name of each member.
[Group]: The path (group) that the member locates in.
[Access Control Policy]: Lists the type of the access control policy or policies associated with the
member, [Use parent group policy] or [Use parent group policy]. [Use its own policy] indicates
that the associated access control policy (policies) is exactly the same with that (those) of its
parent group, inhering from its parent group, and itself cannot add, delete or edit policy. [Use it
own policy] indicates that the member can have its own access control policy instead of inhering
only from its parent group.