Importing LDAP groups

NAM Console ► System Users ► User groups ► Import LDAP Groups

About LDAP groups

If your organization has well-defined Active Directory groups that match your potential user base, we recommend importing LDAP groups rather than individual LDAP users. If the Active Directory groups do not match your user base (for example, the groups are too large), you should import individual LDAP users and manage them in local user groups.

Importing LDAP groups

  1. In the NAM Console, select Security ► User groups.

  2. On the User groups screen, click Import LDAP Groups.
    If this button is not available, you need to go to Authentication ► LDAP, configure an active LDAP connection, and save your changes.

  3. Enter a group name and click Search.
    Groups matching the search criteria will be displayed. Maximum results can be decreased or increased.

  4. Select the groups needed and click Import.
    The selected groups are added to the User groups list.

    Note

    If an LDAP user account matches a locally-created user account, the local user account takes precedence over the LDAP account.

What to do next

After the group has been imported, it has the Guest role by default, which has limited product access. To provide additional access, you can assign different roles and reports to the entire group.

When a user from the group signs in with their network ID and password, a user account is created automatically. After that user account is created, you can assign that user a role, local user group (that has a different role), or reports.

To import LDAP groups:

  1. In the NAM Console menu, select Security ► User groups.
  2. On the User groups screen, click Import LDAP Groups. If this button is not available, you need to go to Authentication ► LDAP, configure an active LDAP connection, and save your changes.
  3. Enter a group name and click Search. Groups matching the search criteria will be displayed. Maximum results can be decreased or increased.
  4. Select the groups needed and click Import. The selected groups are added to the User groups list.
    Note If an LDAP user account matches a locally-created user account, the local user account takes precedence over the LDAP account.
  5. After you import a group, it has a default role of "Guest", which has limited product access.
    • You can provide additional access to every user in a group, or to directly to certain users, or both.See User roles for more information.