A user account group can comprise both user accounts and other user account groups with similar interests. By using a well planned strategy for your user account groups, you apply software permissions and polices to multiple user accounts.
For optimal efficiency, assign software permissions to user account groups rather than individual user accounts, wherever possible. Using this approach, you can associate user accounts to at least one user account group for controlled permission to Building Operation applications. For instance, you can group software permissions with user accounts based on common tasks and responsibilities
You create user accounts groups and then apply one or more software permissions. For example, create a user account for Paul and associate him with the two user account groups: Administrators and Janitors. Paul inherits the software permissions of both user account groups. You can also set up general policies for the user accounts that are members to the user account group. For example, you can enable or disable the ability of group members to change their passwords or to close the User Interface.
For more information, see Software Permissions
.
action_zoom_plus_stroke
Figure:
Users inherit the user account group permissions of which they are members
Paul and Susan are members of the Janitor user account group, which includes an Operator workspace and a set of software permissions. The Janitor group is also a member of the Operator group. Therefore, the Janitor group inherits the settings and workspaces of the Operator group. In other words, Paul and Susan share the software permissions of both the Janitor and the Operator groups, and have access to the Operator and Janitor workspaces.
action_zoom_plus_stroke
Figure:
Software permissions and workspaces are assigned to user account groups