How to
Creating a User Account Group
You create a user account group to make it easier to manage users who require the same software permissions and workspaces.
Software permissions can be assigned to individual user accounts and to user account groups.
Path permissions can be assigned to both, individual user accounts and user account groups. Command permissions can be assigned to user account groups only and cannot be assigned to individual user accounts. If you want to assign command permissions to individual user account, you need to create a group with one individual. You assign command permissions to modify specific permissions that user account groups possess to specific objects on the given path.
Relative path permissions and type permissions can be assigned to both, individual user accounts and user account groups.
If no software permissions are configured for a user account or user account group, the user has no access to EcoStruxure Building Operation software. By default, new user accounts and new user account groups have no permissions to access EcoStruxure Building Operation software. Changes to the software permissions of a user account group or user account are applied the next time the user logs on.
You can also combine software permissions with other general policies for the user accounts that are members to the user account groups. For example, you can enable or disable the ability of the group members to change their passwords or to choose the workspace.
For optimal efficiency, assign software permissions to user account groups rather than individual user accounts, wherever possible. Using this approach, you can associate user accounts to at least one user account group for controlled permission to EcoStruxure Building Operation applications. A user account group can comprise both user accounts and other user account groups. You group user accounts and user account groups with similar interests. For instance, you can group software permissions with user accounts based on common tasks and responsibilities
You create a user account for Paul and associate him with the two user account groups: Administrators and Janitors. You associate Paul with those two user account groups. You grant Administrators and Janitors certain software permissions. Paul inherits software permissions of both user account groups.
In WorkStation, in the System Tree pane, select the EcoStruxure BMS server you want to configure.
Click the Control Panel tab.
Click Account management .
In the Domain box, select the domain where you want to create the user account group.
In the User Account Groups area, click Add .
In the Create Object wizard, in the Name box, type a name for the user account group.
In the Description box, type a description for the user account group.
Click Next .
In the Users Belonging to this Group page, in the Select from box, select a user account group to auto select the user accounts belonging to that group in the Available User Accounts list.
In the Available User Accounts list, select the user accounts you want to add to the user account group.
Click the Add button
.action_zoom_plus_stroke 
Click Next .
In the Workspaces Belonging to this Group page, in the Select from box, select a user account group to auto select the workspaces assigned to that group in the Selected Workspaces list box.
In the Available Workspaces box, select the workspaces you want to add to the user account group.
Click the Add button
.action_zoom_plus_stroke
Click Next .
In the Windows Group Name and Group Policies page, select Allow members to close WorkStation if you want the users in the user account group to be able to close the WorkStation software.
Select Log user actions of group members if you want to activate logging for the users in the user account group.
Select Allow members to change password if you want the users in the user account group to be able to change their own passwords.
Select Allow members to access AS Web Configuration if you want the users in the user account group to be able to log on to SmartX servers' Web configuration sites.
In the Automatic logoff box, select a time if you want the users in the user account group to be logged off after a defined time of inactivity. For more information, see Automatic Logoff .
Select On logoff switch to guest account if you want to log on to the guest account when user accounts that belong to the user account group are manually or automatically logged off. For more information, see Automatic Logoff to Guest Account .
Click the refresh button
to populate the Windows group name box with Windows Active Directory user account groups.action_zoom_plus_stroke 
Note:To connect a Windows Active Directory user account group to an EcoStruxure Building Operation user account group, you need to establish the connection between the EcoStruxure Building Operation domain and Active Directory Windows domain. For more information, see Creating and Configuring a Domain .
Windows Active Directory account groups can only be mapped on EcoStruxure BMS servers that are running on Microsoft Windows operating system. SmartX servers cannot map Windows Active Directory groups.
In the Windows group name box, select the Windows Active Directory user account group you want to map to the EcoStruxure Building Operation user account group.
Important:You can map Windows Active Directory universal and global account groups to EcoStruxure Building Operation user account groups, but you cannot map Windows Active Directory domain local user account groups.
Click Create .
Windows Active Directory User Groups
Creating a Workspace
Software Permissions, User Accounts, and User Account Groups
User Accounts and User Account Groups
Workspace Management
Creating a User Account
User Account Group Wizard – Workspaces Belonging to this Group Page
User Account Group Wizard – Windows Group Name and Group Policies Page
User Account Group Wizard – Users Belonging to this Group Page
Automatic Logoff
Automatic Logoff to Guest Account
Windows Group Name List Is Empty