User groups for access control
What are groups of people?
IAM automatically creates user groups for an organizational unit, enabling you to automatically assign access rights to all employees within that unit. For example, if you want all employees currently working for you to have access to a file server and/or a task-specific email account, you can add the user groups “Full-time University Staff” and/or “Part-time University Staff” (e.g., student assistants) as members of the corresponding security group in the IAM portal. These user groups are automatically populated based on data from the HR system. This eliminates the need for manual assignment of access rights.
IAM automatically creates user groups for an organizational unit, enabling you to automatically assign access rights to all employees within that unit. For example, if you want all employees currently working for you to have access to a file server and/or a task-specific email account, you can add the user groups “Full-time University Staff” and/or “Part-time University Staff” (e.g., student assistants) as members of the corresponding security group in the IAM portal. These user groups are automatically populated based on data from the HR system. This eliminates the need for manual assignment of access rights.
Example (german only):
By adding the user group “Rechenzentrum / IT Support: Full-time University Staff | User Group” as a member of a security group, all members of the group will be granted access to the network drive. This allows you to adjust permissions for multiple users at the same time.
When can groups of people be deployed?
User groups can be used not only to assign permissions for file servers, but also, for example, to grant access to task-specific email accounts and to add users to distribution lists.
What types of people are available, and who belongs to these groups?
| Group of people | Members of the organizational unit |
|---|---|
| Full-time university staff |
|
| Full-time academic staff at the university |
|
| University staff (academic) | Academic staff other than student and research assistants, i.e., in addition to full-time academic staff:
|
| University staff working part-time |
|
All organizational units can use user groups. Each organizational unit automatically has two or three user groups that are managed centrally and cannot be modified manually.
How are the names of groups of people formed?
The name of a group of people consists of three components:
- Long description from the org code (The org code can be found at zuvportal.uni-bamberg.de under “Organizational Management” on the “Complete Org Codes / With Legend” page in columns f05 and f06)
- Type of group (full-time university staff, part-time university staff, academic university staff)
- Cost center (column f01 from the organizational key mentioned above)
Display name format: Full name: Type (Cost Center) | Person Group
Example: Rechenzentrum / IT Support: Full-time University Staff (Cost Center 410270) | Employee Group
Aggregated groups of people
The following service units can use this member management system not only at the departmental level but also for all employees of the unit (= aggregated groups of individuals):
- Bamberger Zentrum für Lehrerbildung
- Rechenzentrum
- Sportzentrum
- Universit?tsbibliothek
Aggregated user groups are only available for service units, as these have subdivisions; in other words, there are no user groups such as “SOWI Faculty.”