# Create external User Group elements

If you have many external users, you might want to organize your external users into several different external User Groups.

##

You can organize the groups, for example, according to different services. A single external user can belong to several groups at the same time. You must have at least one external User Group element.

## Steps

1. Select User Authentication.
2. Browse to Users.
3. Right-click the Authentication domain, then select New > User Group.
4. Configure the settings.
5. Click the OK button.

## External User Group Properties dialog box

Use this dialog box to define external user group properties.

Option | Definition
--- | ---
Name | Specify the user group name in the directory.
RDN | Relative Distinguished Name (RDN): Specify a unique group name for the user to identify in a directory. Note: This field is displayed, if only the Engine has access to the external directory server.
DN | Distinguished Name (DN): This is the full directory path of the user group. It is inherited from the Authentication Domain to which the user group belongs. Note: This field is displayed, if only the Engine has access to the external directory server.
Group Objecti (Optional) | Enter the object ID of the user group. This links the object ID of the user group to the user group name in SMC. Note: Linking the object ID is essential for user authentication, especially if the authentication method uses only group object ID.
Comment | An optional comment for your own reference.
Authentication Domain | Shows the Authentication Domain to which the user belongs.