# Create Internal User Group elements

If you have many users, you might want to organize your users into several different User Groups.

##

You can organize the groups, for example, according to different services. A single user can belong to several groups at the same time. You must have at least one User Group element.

For more details about the product and how to configure features, click Help or press F1.

## Steps

1. Select User Authentication.
2. Expand the branch of the Authentication Domain that represents the correct user database. The default InternalDomain Authentication Domain represents the internal database.
3. Right-click the parent group under the Authentication Domain (this is called stonegate for the internal database), then select New > Internal User Group.
4. In the Name field, enter a name for the Internal User Group.
   - The name is used as the common name (CN) for the group.
   - The distinguished name (DN) is inherited from the LDAP Domain to which this Internal User Group belongs.
5. (Optional) In the Expiration After field, enter a number of days after which the Internal User Group expires.
   When the Internal User Group expires, it stays in the system but is invalid and does not allow authentication until it is re-enabled.
6. Click the Authentication tab.
7. Click Add, then select one or more Authentication Methods.
   If you select several Authentication Methods, you can restrict the Authentication Methods allowed for each user in the User element properties and in Access rules that require authentication.
8. Click OK.

## Internal User Group Properties dialog box

Use this dialog box to define internal user group properties.

Option | Definition
--- | ---
General tab
Name | Specifies the user group name in the directory.
Comment | An optional comment for your own reference.
DN | Inherited from the Authentication Domain to which the user group belongs.
Expiration After | Specifies the number of days after which the user group account is automatically disabled.
Authentication Domain | Shows the Authentication Domain to which the user group belongs.
Parent Group | Shows the parent group to which the user group belongs.

Option | Definition
--- | ---
Authentication tab
Methods | Shows the authentication methods selected for the user group.
Add | Opens the Select Element dialog box.
Remove | Removes the element from the Methods list.