Linking Organization Units to Security Groups

Security groups can be linked to organization units. This can allow your security configuration to more accurately reflect your business needs, as well as supply a more convenient and intuitive way of adding or removing security from users by associating or dissociating them from organization units. Doing so also distributes the maintenance of security groups from PPM administrators to business users who actually manage organization units.

Figure 3-6. Security group membership determined by organization unit

With Resource Management, security group membership can be determined in the following ways:

  • Specified Directly. Security group members are specified in the Users tab of the Security Group window in the PPM Workbench. This method does not take the organization model into account.

  • Determined by Organization Unit. The security group's member list is determined by the organization unit to which it is linked. An organization unit must be specified for this method to be used.

Note: When a security group's members are determined by an organization unit, the organization unit's member list and the manager of the organization unit overwrites that of the security group.

If a security group's members are determined by its organization unit, an additional level of control is added:

  • Direct Members Only. Only the direct members of the organization unit are part of the security group.

  • All Members (Cascading). The direct members of the organization unit and all the members of all its child organization units are part of the security group.

To link a security group to an organization unit:

  1. Log on to PPM.

  2. From the menu bar, select Open > Administration > Open Workbench.

    The PPM Workbench opens.

  3. From the shortcut bar, select Sys Admin > Security Groups.

    The Security Group Workbench opens.

  4. Create a new security group or search for and open an existing one.

    The Security Group window opens.

  5. In the Users tab, select the Determined by Organization Unit option.

    A question dialog box opens, warning you that the security group's present member list will be overridden by the current members of the organization unit.

  6. Click Yes to continue.

    The Organization Unit auto-complete field becomes enabled and required.

  7. Select an organization unit to be linked to the security group.

  8. Specify either Direct Members Only or All Members (Cascading) for the security group's member list.

  9. Click Save.

    You will see the new list of members for the security group.