Groups

The groups functionality enables you to create policies using your organization’s hierarchy.

Groups can contain:

email addresses of users in your organization
other groups

Groups are configured at the account level. To set up groups in the cloud service, click Account > Groups.

The resulting screen shows a list of groups currently defined for your account, an indication of whether they were added manually on the portal or automatically through user provisioning, and the web policy to which the group is assigned.

On this screen, you have the ability to create new groups and edit group membership. Click a group name to edit it, or click Add to add a new group.

Important: Add or load groups only if you intend to use them for policy assignment or exceptions. You don’t need them just because users are members of them.

If available in your account, you can select how synchronized users are assigned to web policies if they appear in more than one group in the directory. Click the Policy assignment method link, and select one of the following:

Directory hierarchy means that a user in multiple groups is assigned to the policy associated with the group that has the fewest intermediate group memberships. For example, if a user is a member of GroupA, and is also a member of GroupB which itself is a member of GroupC, the policy for GroupA takes precedence.
Group ordering means that a user in multiple groups is assigned the policy associated with the group highest in the list on the Groups page. The list starts in alphabetical order and can be changed.