Editing Windows Groups

In addition to allowing a user to authenticate to MOVEit Central, membership in a MOVEit Central permissions group also determines which tasks, hosts, scripts, and other elements a user is allowed to view, use, and edit. While membership in the MOVEit Admin group allows full access to all tasks and other elements, and membership in the MOVEit Log group allows read-only access to all tasks and other elements, which tasks and elements a user in a MOVEit Users group has access to is determined by which task groups are associated with the MOVEit Users group, and which permissions are assigned to those task groups.

1. To view or edit the list of task groups associated with a MOVEit Users group, as well as the list of members of that Windows group, double-click a group in the Windows Group tab, or select it and click the Edit button.

   The Permissions dialog for the group appears.

   

   In this dialog, current members of the Windows group are listed, and members can be added, created, maintained, removed, or deleted. Only those users created through MOVEit Central will be fully editable. Task group associations are also listed and maintained here. Each task group associated with the Windows group is listed, along with counts of the various elements in the task group, and what permissions are assigned for each element type. Administrators may add existing task group associations, create new task groups, edit existing task group, edit the permissions of a task group association, and remove task group associations. Creating and editing task groups here is the same as creating and editing task groups through the Edit Task Groups dialog. See the Task Groups page for more information.

   Task group associations have permissions assigned for each of the types of elements that can belong to a task group.

2. To change permissions, double-click a task group, or select a task group and click the Edit Permissions button.

   The Edit Permissions dialog for the task group appears.

   

   For tasks, there are four different permissions:

   • View/Select - Allows users to see a task but not run or make any changes to it. This permission is always allowed and cannot be removed.
   • Run - Allows users to manually run a task and stop a running task.
   • Add/Edit/Delete - Allows users to add and remove tasks, and add and remove the various elements of tasks, such as sources, destinations, processes, and schedules.
   • Alter Existing Elements - Allows users to change the settings of existing elements of tasks, such as sources and destinations, but does not allow them to add or remove task elements. This permission is completely overridden by the Add/Edit/Delete permissions.

   For all other elements, there are only two different permissions:

   • View/Select - Allows users to see an element of the given type and use it in a task, but not make any changes to it. This permission is always allowed and cannot be removed.
   • Add/Edit/Delete - Allows users to add, edit, and remove a elements of the given type.