...
Enter fully qualified Distinguished Names (DN) for each group, one per line. After correctly configuring this, Datameer X only accepts users with direct group membership in any of these groups. Using this query option doesn't limit the global groups coming in to Datameer X but only enforces membership. That means for each qualifying user Datameer X still imports all of its remote groups into Datameer.
...
If all available users are imported, the following groups are imported into Datameer :X
- DasUsers
- IT
- Finance
- SomeOtherGroup
- Executives
...
In addition to enforcing group membership, Datameer X also provides the ability to control what groups from the remote system are imported when users are added to the system. This gives the administrator the ability to exclude extraneous groups which might be pulled into the system. In addition to excluding groups, Datameer X supports only including certain groups. This allows the administrator to control what groups are available to use for the sharing features of Datameer. This can be especially important when using /wiki/spaces/DAS21/pages/4157768195 Secure Impersonation, for example.
This group filtering is setup using the Group Filtering section of the Authentication administration page:
...
After importing all available users, the Datameer X User/Group setup is:
User | Groups |
|---|---|
adam | DasUsers,IT,Finance |
bob | DasUsers,IT,Finance,Executives |
chris | DasUsers |
david | DasUsers,Finance |
eric | BusinessAnalysts |
frank | IT,Finance |
...
- You have a group that defines the set of users you want to access Datameer.
- You don't actually want to import that group into Datameer , X since it is really only a meta-group.
- You have a few groups that you want to include in Datameer X for sharing purposes.
To achieve this, you can set up the DasUsers group membership filter in Groups under Query Options.
...