Add local or Active Directory users to a local group from a local group's properties.
To add users to a local group
-
From the Groups tab on the host's properties, right-click a group name and choose Properties.
You can also double-click the group name to open its properties.
-
Select the Members tab, open the Add menu and choose Local user.
Note: The AD user option is only available when you are logged in as an Active Directory user for a host that is joined to Active Directory. See Adding AD user to a local group for details.
-
On the Select Local User dialog, search for and select a local user from the list and click OK.
Note: To find a particular user you can filter the list of users. Enter one or more characters in the Search for users box. The mangement console automatically displays the users whose name contains the characters you enter. To redisplay the original list, click the 
button on the Search for users box.
You can also select one of the following options from the user type drop-down menu:
All users
All non-system users
System users
Users requiring AD logon (requires Authentication Services 4.x)
- Users not requiring AD logon (requires Authentication Services 4.x)
-
Click OK on the Members tab to save your selections.
The mangement console adds the users with an 
icon to the list on the Members tab.
-
On the Log on to Host dialog, enter the user credentials and click OK.
Note: This task requires elevated credentials.
Remove local or Active Directory users from a group from the Groups tab of a host's properties.
To remove a user from a local group
- Right-click a group name and choose Properties.
You can also double-click a group from the list to open its properties.
- From the Members tab, select one or more users and click Remove User.
The mangement console adds a 
icon to the user names to indicate they are ready to remove from the list.
- Click OK on the Members tab to save your selections.
- On the Log on to Host dialog, enter the user credentials and click OK.
Note: This task requires elevated credentials.
Any users belonging to a deleted group will no longer have access to the resources previously owned by that group.
To delete a local group
-
From the Groups tab, select one or more groups to delete and click Delete Group.
-
Confirm that you want to delete the selected groups.
-
On the Log on to Host dialog, enter the user credentials and click OK.
Note: This task requires elevated credentials.
The Groups view is automatically refreshed and no longer lists the deleted groups.
The Local Unix Groups report lists all the groups on a host and the group's membership.
Note: This report is available when you are logged on as the supervisor or an Active Directory account in the Manage Hosts role.
To create the Local Unix Groups report
- From the mangement console, navigate to Reporting.
- From the Reports view, double-click the Local Unix Groups report name.
The report opens a new Local Unix Groups tab on the Reporting view.
- To locate a specific group, use a combination of the following report parameters:
- Group Name contains
- GID Number is
- Member contains
- Include all group members in report (Always included when exporting to CSV)
Note: The Member contains field accepts multiple entries separated by a comma. Spaces are taken literally in the search. For example, entering:
- adm, user searches for members whose name contains 'adm' or ' user'
- adm,user searches for members whose name contains 'adm' or 'user'.
Note: When you specify multiple report parameters (for example, Group Name contains, GID Number is, and Member contains), it uses the AND expression; therefore, ALL of the selected parameters must be met in order to locate a group.
If you do not specify a group, it includes all local groups on each profiled host in the report. In addition, it includes all of the group members in the report by default, but you can clear the Include all group members in report option.
- Open the Export drop-down menu and select the format you want to use for the report: PDF or CSV.
It launches a new browser or application page and displays the report in the selected format.
Note: When generating multiple reports simultaneously or generating a single report that contains a large amount of data, One Identity recommends that you increase the JVM memory. See JVM memory tuning suggestions for details.
