By using temporal group memberships, you can manage group memberships of objects such as user or computer accounts that need to be members of particular groups for only a certain time period. This feature gives you flexibility in deciding and tracking what objects need group memberships and for how long.
This section guides you through the tasks of managing temporal group memberships in the Web Interface. If you are authorized to view and modify group membership lists, then you can add, view and remove temporal group members as well as view and modify temporal membership settings on group members.
A temporal member of a group is an object, such as a user, computer or group, scheduled to be added or removed from the group. You can add and configure temporal members using the Web Interface.
To add temporal members of a group
|
NOTE: You can make an object a temporal member of particular groups by managing the object rather than the groups. Select the object, and then choose the Member Of command. On the Member Of page, click Add. In the Select Object dialog box, find and select the groups, and specify the temporal membership settings as appropriate for your situation. |
In the list of group members displayed by the Web Interface, you can distinguish between regular and temporal group members. It is also possible to hide or display so-called pending members, the temporal members that are scheduled to be added to the group in the future but are not actual members of the group so far.
To view temporal members of a group
The list of group memberships for a particular object makes it possible to distinguish between the groups in which the object is a regular member and the groups in which the object is a temporal member. It is also possible to hide or display so-called pending group memberships, the groups to which the object is scheduled to be added in the future.
To view groups in which an object is a temporal member
The temporal membership settings on a group member include the start time and end time settings.
The start time setting specifies when the object is to be actually added to the group. This can be specific date and time or an indication that the object should be added to the group right away.
The end time setting specifies when the object is to be removed from the group. This can be specific date and time or an indication that the object should not be removed from the group.
You can view or modify both the start time and end time settings using the Web Interface.
To view or modify the start or end time setting for a member of a group
The Temporal Membership Settings dialog box provides the following options:
Regular members have the Add to group and Remove from group options set to Already added and Never, respectively. You can set a particular date for any of these options in order to convert a regular member to a temporal member.
|
NOTE:
|
© 2021 One Identity LLC. ALL RIGHTS RESERVED. Feedback Terms of Use Privacy