Groups tab

This tab maps groups to security system access rights.

Figure 366. Groups tab

You access this tab by navigating to Controller (System) Setup > Remote Devices > Remote Drivers, double-clicking the LdapNetwork driver row in the table, clicking the Ldap Server tab, double-clicking the Ldap Server row, and clicking the Groups tab. To view the Discovered pane, click the discover control button ().

Discover groups window

Groups in the LDAP server equate to access rights in the security system.

You access this view when you click the Groups tab in the Ldap Server view.

Figure 367. Discover groups window

This window opens when you click the Discover button () on the Ldap Server Groups tab.

Property Value Description

Group Search Base expression Defines from which node in the LDAP server to begin searching for groups (access rights).

Group Search Filter expression Defines the groups (access rights) to use for the search.

Group Search Scope

drop-down list

Property	Value	Description
Group Search Base	expression	Defines from which node in the LDAP server to begin searching for groups (access rights).
Group Search Filter	expression	Defines the groups (access rights) to use for the search.
Group Search Scope	drop-down list	Defines how much of the LDAP server to search. `Object Scope` `One Level Scope` `Subtree scope` extends the scope to the child nodes of the node defined in the `Group Search Base` expression.

Defines how much of the LDAP server to search.

Object Scope

One Level Scope

Subtree scope extends the scope to the child nodes of the node defined in the Group Search Base expression.

LDAP Group Manager pane

In addition to the standard control buttons (Delete, Filter, Refresh, and Learn Mode), these buttons serve LDAP functions.

Discover identifies the LDAP groups that are available for to be assigned to security system access rights.

LDAP Group Manager columns

Column	Description
GroupName	Identifies the security system name for this group.
AccessRight	Identifies the security system name for the assigned set of access rights.

Discovered Pane

In addition to the standard control buttons (Filter and Export), these buttons apply specifically to LDAP configuration:

Add moves the selected discovered group from the Discovered pane to the LDAP Group Manager pane.
Match associates the selected access right in the LDAP Group Manager pane with a discovered and selected LDAP group in the Discovered pane.

LDAP group Discovered columns

Column	Description
distinguishedName	Identifies the attribute in the LDAP server.
cn	Indicates if the property is required by the LDAP server.
GroupExists	Group exists defaults to false.