Default Groups 

Definition

In addition to the groups defined in the user data source(s), three default groups are determined dynamically at runtime and are not defined in the user data source(s). These are

●     Everyone: This group is the sum of the groups Anonymous Users and Authenticated Users.

●     Anonymous Users: This group contains all named anonymous users that are listed in the ume.login.guest_user.uniqueids property in UME Properties.

●     Authenticated Users: This group contains all non-anonymous users, that is, users that have to authenticate themselves to access an application.

The following diagram illustrates the relationship between the groups.

In addition, the SAP J2EE Engine creates standard groups for administrators and guests (default names dependent on installation parameters: Administrators and Guests or SAP_J2EE_ADMIN and SAP_J2EE_GST). See Standard User Groups.

You can change the names of the default groups in UME properties. For more information, see Default Groups. Changing the name of these groups has no effects on portal permissions already assigned to these groups. You do not have to reassign the permissions to the new names.

The UME maintains internally, the default groups Everyone, Authenticated Users, and Anonymous Users. If you create groups with these names with the native user interface of your LDAP directory, you must block the UME from reading them from the LDAP directory. Otherwise the name is ambiguous. To block the user account ID in LDAP, use the UME property ume.ldap.blocked_groups.