The group profile allows Admins to change the membership list of the group, as well as the name and description, and several other group-level settings. (Name changes are harmless because groups are tracked internally using a separate ID.) The following sections are currently available on this page:
Change General Information
Add Or Remove Members
Change GroupAdmin Settings
Change Member Settings
Change Display Profile
View Folder Permissions
Address Book Information
Group Custom Email Notifications
Change Announcement
Change Logo
Change General Information
The group name and description can be changed in the Change General Information section.
All characters in the ISO-Latin-1 (ISO/IEC 8859-1) set are allowed in group names.
Note: Group names may not begin with the characters "@!", for internal reasons.
Add Or Remove Members
This section is provided to add or remove users from this group and to change their membership class. The "Select User" drop-down only lists users who are not already members of the group. If there are many users in this organization, the "Select User" drop-down may be automatically replaced with a "Find User" dialog instead. Administrators (and authorized GroupAdmins) may designate certain members of the group as GroupAdmins. Click the "Make Admin" link to promote the given member as a GroupAdmin, and click the "Make Not Admin" link to remove GroupAdmin permissions from the related user.
Users who are normal Members of a group typically enjoy all the permissions enjoyed by that group. GroupAdmins are users who have been "promoted" to assist with the management of the group (such as adding/deleting users). Limited Members are subordinate users that typically enjoy only a few of the group attributes, such as being visible in the address books of full group Members.
If entries appear or disappear mysteriously from this list, remember that if the "External Authentication" feature has been enabled, MOVEit DMZ can automatically replicate some or all of its user group membership information from an associated LDAP server. (External Authentication synchronization actions will be logged in the audit trail, so they should become less mysterious after some research.)
Also available at the bottom of the membership section are two links which can be used to message the members of the group. The first is a link which can be used to send an insecure email to all the members of the group that have email addresses. This is simply a "mailto" link, containing a comma-delimited list of all email addresses of the group members. The second is a link to compose and send a package to the group. Use this link instead of the first link if security is a priority, and if you want to send files to the group.
Change GroupAdmin Settings
These settings determine the authority GroupAdmins of this group will exercise over group members.
Change the logo and announcement for this group: Determines whether GroupAdmins of this group will have the ability to change the logo and announcement for this group. If this option is enabled, GroupAdmins will be able to view the profile pages for their groups and will have access to the Edit Logo and Edit Announcement sections.
Add new users as group members and edit/delete existing group members: Determines whether GroupAdmins of this group will have the ability to add, delete and modify details about the end user members of the group. If this option, or the Change Passwords of Existing Group Members option is enabled, GroupAdmins will be able to change the security status of end user group members as well.
List all users in the organization and add existing users as group members: Determines whether GroupAdmins of this group will be able to list all end users in the organization, and add those users to their groups, thereby gaining any administrative authority they are granted by the group over those users.
Change passwords of existing group members: Determines whether GroupAdmins of this group will have the ability to change passwords of the end user members of the group. If this option, or the Edit/Delete Existing Group Members option is enabled, GroupAdmins will be able to change the security status of end user group members as well.
Enjoy following permissions on member home folders: Determines which permissions, if any, GroupAdmins in this group will enjoy on the home folders of end user members.
List and edit temporary users added by group members: Determines whether GroupAdmins in this group will have administrative access to Limited Members of the group. Temporary users created by group members are automatically assigned to the group as a Limited Member. This option should be enabled if you want GroupAdmins to be able to see and control who the group's full time end users are communicating with.
Set a member's file quota to any value up to: Used to set a limit to how high GroupAdmins can set the user quotas for individual end user members of this group. For example, if this value is set to 50 MB, a GroupAdmin may set an individual user quota to 1 MB or 25 MB but not 60 MB. A value of 0 KB or 0 MB indicates there is no restriction on the GroupAdmin's ability to set end user member file quotas in effect.
Set a member's ad hoc transfer quota to any value up to: Used to set a limit on how high Group Admins can set the user Ad Hoc Quota setting for individual end user members of this group. For example, if this value is set to 50 MB, a GroupAdmin may set an individual Ad Hoc Quota to 10 MB or 20 MB but not 60 MB. A value of 0 KB or 0 MB indicates there is no restriction on the GroupAdmin's ability to set end user member ad hoc quotas in effect.
Set a member's per-package attachment quota to any value up to: Used to set a limit on how high Group Admins can set the user Maximum Attachment Size setting for individual end user members of this group. For example, if this value is set to 5 MB, a GroupAdmin may set an individual user maximum attachment size to 1 MB or 2 MB but not 6 MB. A value of 0 KB or 0 MB indicates there is no restriction on the GroupAdmin's ability to set end user member attachment quotas in effect.
Change Member Settings
These settings determine the privileges conferred on members of this group. The settings available here depend on the settings chosen on the 'Web Interface - Settings - Ad Hoc Transfer - Registered Users page'.
Send packages: Determines whether end user members of this group can send packages. This setting is only available when the organization-level Registered Users setting is set to "Members of groups that grant Ad Hoc Transfer access".
Send packages to registered users not listed in their address books: Determines whether end user members of this group can send packages to registered users who are not in their address book. This setting is only available when the organization-level address book setting is set to "Members of groups that grant this permission".
Send packages to recipients who are not currently registered users: Determines whether end user members of this group can send packages to unregistered users. This setting is only available when the organization-level setting is set to "Members of groups that grant this permission".
See limited members in their address book (if allowed to see individual group members): This option determines whether temporary users will show up in the address books of all the normal members of a group (specifically, those users who have this group in their address book with the 'Allow Packages to Individual Members of Group(s)' setting applied). Note that temporary users created as an unregistered recipient of - or unregistered sender to - a normal member, will always show up in the address book of that one member. The question settled by this option is, should they also be included in the address books of the other group members? For example, Group A has three registered users, Member 1, Member 2 and Member 3. If Member 1 sends a package to Temp 1. With this option selected, Temp 1 will show up in the address books of Member 2 and Member 3, as well as that of Member 1. Similarly, if Temp 2 self-registers to send a package to Member 2, Temp 2 will appear in the address books of Member 1 and Member 3, as well as that of Member 2. (With the option not selected, Temp 1 would only appear in Member 1's address book, and Temp 2 would only appear in Member 2's address book.) Select this option if all members of a group should be able to communicate with any temporary user that is created for an Ad Hoc Transfer with any normal group member.
Change Display Profile
The Change Display Profile section allows an administrator to change the display profiles that will be used to create the look and feel of the web interface for GroupAdmins and regular members of this group. Display profiles can be independently set for these two user types. This allows group members to be assigned a basic profile, while GroupAdmins get a more advanced profile.
When set to "(None)", the associated members will use the display profile configured for their user class. Otherwise, they will use the selected profile. If a user is a member of more than one group, each with their own selected display profiles, the user will use a display profile which combines the settings of the individual display profiles that would normally apply to the user.
View Folder Permissions
This section displays folder permissions which have been explicitly assigned to this group. To add, delete or change these permissions, follow the links to the folders and use the "change permission" links on the various folders.
Address Book Information
The address book for the group contains the list of users and groups any member of this group will be able to send packages to if Ad Hoc Transfer is enabled on the DMZ system.
The current list of users and groups in this group's address book is shown at the top of the page. The list has three columns:
User/Group: The username or group name of the address book entry.
Allow Packages to Individual Members of Group(s): This property is only available for groups. When set to Yes, the members of that group will also be shown in this group's list of available recipients.
Action:
Remove: Removes this entry from the address book
A list of users and groups who can be added to this group's address book is also shown. Selecting one or more users and/or groups from the list and then clicking the "Add Entries" button will add those users and groups to this group's address book. Select the "Allow Packages to Individual Members of Group(s)" checkbox if you want the members of this group to be able to see the members of the added group in their list of available recipients. Select the "Also Add..." checkbox if you want to add the current group to each of the selected users' and/or groups' address books. Multiple selection is possible by holding down the Control key when selecting entries.
Hint: To permit all members of a group to send packages to all other members of their group, add the group to its own address book and make sure the Allow Packages to Individual Members of Group(s) option is enabled.
A group announcement, if present, will appear in the Announcements section of the Home page of all members of the group. If a user is a member of multiple groups that have configured group announcements, he or she will see all associated announcements at the top of his or her page.
Change Logo
A group logo, if present, will be placed at the top of the content section of the MOVEit DMZ web page for all members of the group. Images must be in GIF format and must be less than 100,000 bytes. If a user is a member of multiple groups that have configured group logos, he or she will see all associated logos at the top of his or her page.
