It is the responsibility of the Security Policy Administrator, Authorizer Administrator, and User Administrator to add groups of users to SPP.

To add a user group

  1. Navigate to Security Policy Management > User Groups or User Management > User Groups.
  2. Click  New User Group from the toolbar and select User Group.
  3. In the New User Group dialog, enter the following information:

    1. Name: Enter a unique name for the user group.

      Limit: 50 characters

    2. Description: (Optional) Enter information about this user group.

      Limit: 255 characters

  4. On the Permissions tab, select Help Desk and/or the Personal Password Vault permission to be assigned to each member of the Group. For each group member, the selected permissions of the Group will be combined with any existing permissions that have already been granted explicitly or by some other Group to which they belong. For more information, see the Permissions tab (add user).

    During synchronization of a Group (which occurs every 15 minutes), a user may be identified as no longer being a member. In this case, the selected permissions of the Group are removed from the user unless the user is also a member of another Group from which they inherit the permission. SPP does not keep track of nor distinguish between an explicitly assigned permission versus one that was assigned via a Group.

    IMPORTANT: The Personal Password Vault permission, like any other permission, can be set explicitly on a user or inherited from a Group. If a user with the Personal Password Vault permission stores one or more personal passwords and then later has the permission revoked, either explicitly or by having been removed from all Groups from which they inherited it, the user will no longer be able to access Personal Password Vault features. But the user’s data within the vault will still be maintained. If at any point the user is granted the Personal Password Vault permission again, they regain access to all of their existing data.

  5. Click OK. On an import, the user group is created and the assigned users appear when the import process is complete.