Documentation for Crowd 1.3. Documentation for other versions of Crowd is available too.

Within any given directory, you can choose the groups and roles to which each user belongs.

Note that a user's group membership is particularly important, as groups are often used to control access to applications.

What happens if a user exists in more than one directory?

If the same username exists in more than one directory assigned to an application, Crowd treats these usernames as the same user. Crowd searches all the assigned directories for the user, and amalgamates the group and role memberships.

For example, let's assume you have a user 'P' who exists in both directories 'D1' and 'D2', and is a member of group 'G1' in 'D1' and 'G2' in 'D2'. Crowd will grant access to the user based on membership of both 'G1' and 'G2'.

(info) When authenticating the user, Crowd uses the first directory in which the username occurs, as described in 3.3.1 Specifying the Directory Order for an Application.

To add a user to a group,

  1. Log in to the Crowd Administration Console.
  2. Click the 'Users' link in the top navigation bar.
  3. This will display the User Browser. Select the relevant directory, locate the user you wish to add, and click the 'View' link that corresponds to the user.
  4. This will display the 'User Details' screen. Click the 'Groups' tab.
  5. A list of the user's current groups (if any) will be displayed. Select the relevant group from the drop-down box below the list, then click the 'Add' button.

(info) The user will now be authorised to use any applications that use this group to control access.

To remove a user from a group,

  1. Log in to the Crowd Administration Console.
  2. Click the 'Users' link in the top navigation bar.
  3. This will display the User Browser. Select the relevant directory, locate the user you wish to remove, and click the 'View' link that corresponds to the user.
  4. This will display the 'User Details' screen. Click the 'Groups' tab.
  5. A list of the user's current groups (if any) will be displayed. Click the 'Remove' link corresponding to the relevant group.

(info) The user will now be unable to log in to any applications that use this group to control access.

Screenshot: 'User — Groups' 

 
(info) The adding or removing of a user to or from a role is performed via the Role Browser, but is otherwise identical to the process for groups.

関連トピック

Crowd Documentation  





Except where otherwise noted, content in this space is licensed under a Creative Commons Attribution 2.5 Australia License.