Managing group membership - PingOne Cloud Platform - PingOne

PingOne Cloud Platform

bundle
pingone
ft:publication_title
PingOne Cloud Platform
Product_Version_ce
PingOne Cloud Platform
PingOne
category
Administratorguide
ContentType
Guide
Product
Productdocumentation
p1
p1cloudplatform
ContentType_ce
Guide
Product documentation
Guide > Administrator Guide

You can define group members manually, dynamically, or using a combination of both.

To include members dynamically, you create a filter that defines which users should be in the group. If you create a dynamic group, you can still add users to the group manually.

  1. Go to Directory > Groups.
  2. Locate the group to which you want to add users.

    You can browse or search for groups.

  3. Click the appropriate group name to expand the details pane.
  4. Click the Users tab.
    Note:

    If the group already has members, use the pencil icon to edit membership using the Add/Remove users button or Edit using filter button.

  5. To add users to the group, follow the instructions for your preferred method.

Adding or removing users manually from the Groups page

Use the Groups details page to add or remove members manually. You can also add users to a group from the Users details page.

  1. Go to Directory > Groups.
  2. Locate the group to which you want to add users.

    You can browse or search for groups.

  3. Click the appropriate group name to expand the details pane.
  4. Click the Users tab.
  5. Click the Add Individually button.
    Note:

    If the group already has users, click the Pencil icon, and then click the Add/Remove Users button.

  6. Click the All Users tab.

    All available users are shown in the All Users list.

  7. Do one of more of the following:
    • To add a user, click the + icon for the appropriate user.
    • To remove a user, click the check mark for the appropriate user.
      Note:

      If a user is a member of a group because of matching a filter, the user is shown in the Members list. However, you can't manually remove a member of a dynamic group. To remove a user from a dynamic group, change the filter criteria or modify user attributes to no longer match the filter criteria.

  8. Click Save.

Adding or removing users dynamically from the Groups page

Use the Groups details page to add or remove members dynamically based on a filter.

If new users are added, or existing users are updated, the group membership is updated automatically based on the criteria in the filter. If you create a dynamic group, you can still add users to the group manually.

  1. Go to Directory > Groups.
  2. Locate the group to which you want to add users.

    You can browse or search for groups. The results list is updated as you enter the search query.

  3. Click the appropriate group name to expand the details pane.
  4. Click the Users tab, and then click Add with a Filter.
    Note:

    If the group already has users, click the pencil icon, and then click Edit Users Filter.

  5. In the Create Dynamic Group window, define the filter that will determine group membership.

    For examples of filter expressions, see Dynamic group examples.

  6. Enter the first condition:
    Attribute
    The user attribute to filter on.
    Note:

    Boolean attributes support the Equals operator only, because they are either true or false.

    Operator
    Select Equals, Starts with, Ends with, or Contains.
    Value
    Enter the appropriate value.

    A screen capture of Create Dynamic Group page, showing a condition or filter that identifies a certain category of users.
  7. If needed, click + Add, and then click Condition to add another condition.
  8. Select All or Any to determine how the linked conditions will be evaluated: Boolean logical All or Any.
    Note:

    All filters in the same condition block must use the same logical operator.

  9. Continue adding conditions or condition blocks as needed.
  10. Click Save Filtered Users.

    The group is updated with any users that match the expression. If the filter is invalid, you see an error message and no users are added to the group.

  11. Click the Users Matched tab to see the list of filtered users.

Adding or removing users manually from the Users page

Use the Users page to manually add or remove users from a group.

  1. Go to Directory > Users.
  2. Locate the user you want to view.

    You can browse or search for users. The results list is updated as you enter the search query.

  3. Click the user entry to open the details panel.
  4. Click the Groups tab.

    The list shows current group membership.

  5. Click the Pencil icon.
  6. Do one or more of the following:
    • To add the user to a group, select the check box next to the group name. A check mark appears.
    • To remove a user from a group, clear the check box next to the group name. The check mark disappears.
    Note:

    If a user is in a group due to matching a filter, you can't directly remove a user that was added to a dynamic group. To remove a user from a dynamic group, change the filter criteria or modify user attributes to no longer match the filter criteria.

  7. Click Save.

Adding users using the Advanced (SCIM) Mode editor

If you prefer to create a SCIM filter directly, you can use Advanced (SCIM) mode to determine which users should be in a group.

If new users are added, or existing users are updated, the group membership is updated automatically based on the criteria in the filter. If you create a dynamic group, you can still add users to the group manually.

  1. Go to Directory > Groups.
  2. Locate the group to which you want to add users. You can browse or search for groups.
  3. Click the appropriate group name to expand the details pane.
  4. Click the Members tab and then click + Add members dynamically.
  5. In the Create Dynamic Group window, click Advanced (SCIM) mode.
    Note: If you have defined a filter in Basic mode, the filter will appear as a SCIM filter, although some complex SCIM filters cannot be displayed in Basic mode.
  6. Enter a SCIM filter expression to define members of the group. For more information, see SCIM filter language.
  7. Click Save Filtered Users.
    The group is updated with any users that match the expression. If the filter is invalid, an error message will appear and no users will be added to the group.
  8. Click the Users matched tab to see the list of filtered users.