UMEGroups

A user management engine (UME) group is a collection of users. Groups serve to create sets of users who have something in common, for example, users who work in the same department or users who have similar tasks in a company. Groups make it easier to manage users. For example, you can assign a role to a group instead of assigning the role to each user individually. This is known as indirect role assignment.

You can create a hierarchy of groups, where groups are members of other groups. Nesting of groups in this manner can serve to represent the hierarchy in a company, for example.

In the following figure, users Le Clerc and Mikovics are members of the Java Developers Group and the ABAP Developers Group respectively. Through these respective groups Le Clerc and Mikovics receive the respective roles Java Development Role and ABAP Development Role. Both are members of the All Developers Group and through this group both receive the Development Role.

Indirect Role Assignment and Nested Groups

With this structure an administrator can assign the roles needed for Java development or ABAP development by assigning the user to the relevant group.

This nested group structure also plays a role in searches. If you search for the members of the Development Role, the UMEonly returns the All Developers Group unless you enable a recursive search. A recursive search returns the Java Developers Group, the ABAP Developers Group, the user Le Clerc, and the user Mikovics as well.

For more information, see Managing Users, Groups, and Roles .