These properties enable you to define how virtual groups are formed from your user base. The user management engine (UME) builds these groups dynamically, based on user attributes.
More information: Configuring Virtual Groups.
Virtual Group Properties of the UME
Property |
Value |
Description |
ume.virtual_groups. |
Default value is Virtual group {groupName}ume. |
This value appears under Description in the group display. |
ume.virtual_groups. |
Default value is {groupName} |
This value appears under Name in the group display. |
ume.virtual_groups. |
Default value is ; (semicolon). |
Use this property to define the separators used in the virtual group name list (ume.virtual_groups.names). Change this value if you want to include a semicolon in the group name. |
ume.virtual_groups. |
|
By default, this property is undefined, meaning no virtual groups are created. By entering a series of names here, the UME creates virtual groups with these names.
By entering the following, the UME creates three virtual groups, titled Marketing, Production, and Distribution: Marketing;Production;Distribution |
ume.virtual_groups. |
|
By default, this property is undefined. The value here is prepended to the values in ume.virtual_groups.names to form the unique names and unique IDs of the virtual groups. This property is used to prevent name collisions with existing group names.
If role assignments to virtual groups exist, changing this property breaks those role assignments. The roles are assigned to groups with the old names, which no longer exist. |
ume.virtual_groups. |
Default value is TRUE. |
Enables the removal of leading and trailing spaces in the property ume.virtual_groups.names. This enables you to enter a more readable list without having to worry about spaces at the beginning and end of the names. If you want to have leading or trailing spaces in the name, set this property to FALSE. |
ume.virtual_groups. |
|
Defines the logical user attributes, based on which the UME builds the virtual group. More information: Logical Attributes.
To continue the above example, set this value to department. The UME assigns users with the value Marketing for the attribute department to the virtual group Marketing. |
ume.virtual_groups. |
Default value is TRUE. |
If the user attribute you selected for ume.virutal_groups.user_attribute supports multiple values, setting this value to TRUE, means the user can belong to multiple virtual groups.
The user attributes do not support multiple values by default, but if you mapped an attribute to an LDAP attribute with multiple values, you could read for a user the attribute department, which has the values Marketing and Distribution. This user would then belong to both virtual groups Marketing and Distribution. |
ume.virtual_groups. |
|
Defines the namespace of the user attribute, which is used to define the virtual groups. |