Skip to content

Group Management Function

Overview

A group is a mechanism that brings together users or departments so that access can be controlled on a group basis. A user or a department can belong to multiple groups.

Group Administration

You can manage group information such as group names and members.

Group management screen listing group name and members

How to Set Up Group Administration

  1. Open the "Manage" menu and click "Group administration".

  2. Enter the required items in the table below.

    Item name Description Setting method
    Group ID ID used by the system Entered automatically by the system
    Version Version number used by the system Entered automatically by the system
    Group name Name of the group Enter any group name
    Body Description of the group Enter any description
    Disabled Whether the group is enabled or disabled Check to disable the group
    LDAP synchronization Group created by LDAP synchronization Entered automatically by the system
    Save as a new version Whether to count up the version Check to count up the version

  3. Click the "Update" button.

How to Use the Group Function

Groups have various features. See the following for details.

Search for Users/Departments Belonging to a Group

You can search for groups by specifying the users or departments that belong to them with the following operation. This operation requires tenant manager privileges or group management privileges.

  1. Open the "Manage" menu and click "Group administration".

  2. Enter the string to search for in the "Depts" or "Users" input field of the filter and press the Enter key. The string entered when searching for a department or a user is searched in the following items.

    Item name Search target
    Depts Department name / Department code / Description
    Users Login ID / Name / User code / Description

  3. The search results are displayed in the group list.

  4. Click the target group in the search results.
  5. Click the "Members" tab.

Access Control by Group

You can allow access to sites and records on a group basis. For details, see Site Access Control or Record Access Control.

Group Management Permission for Each User

You can set the group management permission and the group creation permission for each user. See "User Management Function: Creation" in the manual to set them.

Limitations

Access Restrictions with Security.json

Security.json has a function that allows access to Pleasanter on a group basis when "AllowIpAddresses" and "IpRestrictionExcludeMembers" are set together. If you use this function to allow access on a group basis, deleting or disabling a group, or deleting a user who belongs to it, prevents the users who belong to the group from accessing Pleasanter.

If a user with important administrative privileges, such as a tenant manager, can no longer access Pleasanter, it may be necessary to change the IP address of the device in use or to reconfigure Security.json.

*If you do not restrict access by IP address with "AllowIpAddresses" in Security.json, you do not need to consider the above limitation.