In this section:
Introduction
A permission group is a set of permissions that enable members to perform actions or access specific reports or data. Some built-in group permissions contain specific user roles (see Built-in User Groups). You should assign users to a default group prior to assigning them to project-related groups because default groups indicate users' roles.
Viewing a Permission Group
Click Groups on the User Administration home screen and click on a group name to view it. DTP ships with default groups that cannot be modified. Links to these built-in groups are disabled.
The group name and description are shown at the top of the page. To edit the description, click Edit Description.
Information about the group is split up into three sections:
- Users: Lists the current users in the group and provides the ability to manually add users to the group. Users can also be programmatically added by syncing with your LDAP system (see Automatic Synchronization).
Permissions: Shows the current module permissions attached to the group and provides the ability to add module permissions for each module in your Parasoft infrastructure (e.g., grs, pstsec, etc.).
- Inherited Groups: Shows groups inherited by the group and provides the ability to add inherited groups.
Creating a Group
- Click Groups on the User Administration home screen and click Add Group.
- Provide a name for the group and a short descriptions, if desired (descriptions are optional) and click Create. A blank group template will open. See Editing Groups for more information about adding users, permissions, and inherited groups.
Editing Groups
Click Groups on the User Administration home screen and click on a group name to make changes to the permissions, hierarchy, or membership. Refer to the following sections for details:
Configuring Group Permissions
See User Administration Overview to learn about particular permissions.
- Click Groups on the User Administration home screen and click on a group name to open its detail page.
- Click Add Permissions.
- Choose a functionality from the Tool drop-down list.
Choose a permission setting from the Permission drop-down list that describes the range of permissions to grant.
Choose a status from the Value drop-down menu to specify the type of permission. Some tools take a Boolean value to grant or deny access to the tool. Choose true to enable access or false deny access to the tool.
Click Confirm to add the permission and close the dialog or click Confirm and Add Another to add the permission and leave the dialog open so you can add another one.
Configuring Inherited Groups
You can add inherited groups to your group, causing it to inherit users, permissions, and even other groups from them. When an inherited group has inherited groups of its own, your group will inherit users, permissions, and inherited groups from them as well.
- Click Groups on the User Administration home screen and click on a group name to open its detail page.
- Click Add Groups. All accessible groups are shown.
To find a specific group, enter a search term in the Search field. The list will automatically update to match your search term.
- Select the groups you want this group to inherit users, permissions, and groups from.
- If you search again, the groups previously selected will remain selected, even if they are not included in the new search. The total number of groups currently selected is shown at the bottom of the dialog.
- Click Confirm. All selected groups will be added.
Manually Adding Group Members
- Click Groups on the User Administration home screen and click on a group name to open its detail page.
- Click Add Users. All available users are shown.
- To find a specific user, enter a search term in the Search field. The list will automatically update to match your search term.
- Select the users you want to add to this group.
- If you search again, the users previously selected will remain selected, even if they are not included in the new search. The total number of users currently selected is shown at the bottom of the dialog.
- Click Confirm. All selected users will be added.
Automatic Member Synchronization
You can set groups that have been created manually to automatically synchronize with an equivalent LDAP group if the Use Member Attribute option is enabled (see Configuring LDAP). The following will occur automatic synchronization:
- Periodically update the list of users assigned to this group based on the members of the equivalent LDAP group.
- Automatically create users if they do not already exist.
- Immediately synchronize groups after changes are saved if the group is new or if automatic synchronization was disabled.
If DTP is configured to use multiple LDAP servers, group synchronization will be based on the first matching LDAP group available.
