Documentation for Crowd 1.6. Documentation for other versions of Crowd is available too.
Within any given directory, you can choose the groups and roles to which each user belongs. Note that a user's group membership is particularly important, as groups are often used to control access to applications.
On this page:
To add a user to a group,
The user will now be authorised to use any applications that use this group to control access.
To remove a user from a group,
The user will now be unable to log in to any applications that use this group to control access.
Screenshot: 'User — Groups'
If the same username exists in more than one directory assigned to an application, Crowd treats these usernames as the same user. Crowd searches all the assigned directories for the user, and amalgamates the group and role memberships.
For example, let's assume you have a user 'jsmith' who exists in both directories 'Customers' and 'Partners', and is a member of group 'G1' in 'Customers' and 'G2' in 'Partners'. Crowd will grant access to the user based on membership of both 'G1' and 'G2'.
Crowd's role-based access control could be enhanced
At present, the implementation of roles in Crowd is identical to the implementation of groups. Additional development work would be needed to differentiate the functionality of roles from groups. If you would like to help us to design better role-based access control, please add a comment to the improvement request CWD-931, letting us know how you would like to see it work.
To add a user to a role,
Screenshot: Managing a user's roles