To assign a manager to a group, right-click the group, click Properties, and go to the Managed By tab in the Properties dialog, shown in the following figure. On the Managed By tab, click Change and select the user or contact to designate as the manager.
Figure 15: Assigning a manager to a group
If you select Manager can update membership list, the manager can use Active Roles to add and remove members from the group.
It is possible to assign multiple group owners, to load balance the management of the group. To assign additional owners to the group, click the button next to the Secondary owners box. Group owners can be given the same rights over the group as the manager. For example, selecting the check box beneath the Secondary owners box gives the secondary owners the authority to add or remove members from the group.
It is possible to assign management of the group to another group: you can select a group in the Select Objects dialog that you use to specify the manager or a secondary owner. This enables every member of the group to act as the manager or secondary owner.
You can assign a manager to a group with the Active Roles Console.
To assign a manager to a group
-
In the Console tree, locate and select the folder that contains the group you want to assign a manager to.
-
In the details pane, right-click the group, then click Properties.
-
On the Managed By tab in the Properties dialog, click Change under the Name box.
-
Use the Select Objects dialog to locate and select the user or contact you want to be responsible for the group - the manager of the group.
-
(Optional) To authorize the assigned manager to add or remove members from the group, select the Manager can update membership list check box.
NOTE: Consider the following when assigning a manager to a group:
-
To assign additional managers to the group, click the button next to the Secondary owners box. Secondary owners can be given the same rights over the group as the manager. For example, selecting the check box beneath the Secondary owners box gives the secondary owners the authority to add or remove members from the group.
-
You can select a group for the role of the manager or secondary owner. This enables every member of the group to act as the manager or secondary owner.
-
To locate the group you want to modify, use the Find function of Active Roles. Once you found the group, open its Properties dialog by right-clicking the group in the list of search results, then clicking Properties.
Depending on its scope, a group may contain members (users, groups, computers, contacts) from anywhere in the forest, or only members from its own domain.
To add members to a group, right-click the group, click Properties, and go to the Members tab in the Properties dialog. On the Members tab, click Add. This displays the Select Objects dialog where you can select the objects you want to add to the group.
In the Select Objects dialog, you can select objects from the list or type object names. Click Check Names to verify the names you type. If Active Roles cannot find an object, it prompts you to correct the name.
The Members tab lists objects that belong to the group. If the Show indirect members check box is selected, the list also includes the objects that belong to the group because of group nesting.
The Temporal Membership Settings button can be used to specify the date and time when the selected members should be added or removed from the group. For more information about this feature, see Using temporal group memberships.
Figure 16: Adding members to a group
On the Members tab, you can manage user accounts and other objects directly from the list of members. To manage a group member, right-click the member and use commands on the shortcut menu.
NOTE: When you select multiple groups, the Members tab lists the objects that belong to each of the selected groups. If a given object does not belong to one of the selected groups, then that object does not appear in the list.
To add a member to a group
-
In the Console tree, locate and select the folder that contains the group to which you want to add a member.
-
In the details pane, right-click the group, then click Properties.
-
On the Members tab in the Properties dialog, click Add.
-
In the Select Objects dialog, type the name of the directory object, such as a user or computer, that you want to add to the group, or select and add the object from the list, then click OK.
NOTE: Consider the following when adding members to a group:
-
In addition to users and computers, you can also add contacts and other groups to a group.
-
The Members tab displays a list of objects that belong to the group. You can select the Show indirect members check box for the Members list to also display the objects that belong to the group indirectly (because of group nesting). If that check box is cleared, the Members list displays only those objects that were added to the group directly.
-
The Add button appears on the Members tab only if the group is a basic group. For a dynamic group, use the Membership Rules tab to populate the group. For details, see Administering dynamic (rule-based) groups.
-
Depending on the scope of a group, the group can hold members from anywhere in the forest or only from its own domain. For more information, see Group management.
