In Opti ID, user access to any entitled product is done using groups. A group contains users, products, and roles. In the Opti ID Admin Center, you can create a group and assign it product entitlements, roles per product, and users. After logging into Opti ID, a user can access any products assigned to any group they belong to. Access to the product is constrained by the roles assigned for that product in the group.
A group lets you organize users with similar roles or entitlements that reflect your internal organizational structure or teams. You can also create groups that match your identity provider (IdP) configuration. If you have multiple products, you can create a group for each.
There are three types of groups.
- Custom groups – Groups you create and configure yourself. You can make any edits you want to custom groups.
- Internal groups – Only includes the Everyone group, which is automatically set up for your account. All users in your organization are automatically added to this group, which lets you add a user to one or more groups without having to create the same user multiple times. You cannot make any edits to internal groups.
- Product groups – Default groups that are automatically set up for your account based on your Optimizely products. There is a group for each system role. This way, you can add users who should have the same role to a product group instead of individually assigning the system role to each user. You can only add or remove users in product groups.
Add a custom group
- Go to Group Access in the Opti ID Admin Center. A list of groups showing the name, number of users in the group, group type, and created and modified dates displays.
- Click Add Group. The Add Group panel displays.
- Complete the following settings:
- Name – Enter the name of the group, such as CMPUsers.
- Users tab – Enter the name of a user you want to add to the group. As you type, the user's names display. Select the users you want and the users are added to the group list. You can also remove users from the group as needed.
-
Products tab –
- Select a product instance from the Select a product instance drop-down list.
- Select one or more roles from the Select roles drop-down list.
- Click Add to finalize your product and role selections and add them to the group.
- Repeat these steps as necessary to add the desired products and roles to the group. Each time you click Add, the selections display as shown in the following image.
- Details tab – Enter a description of the group. By adding a description, you can distinguish groups from one another. The description displays beneath the group name in the group list and in the Details tab for each group.
- Click Save to create the group.
Edit a group
When you edit a custom group, you can
- edit the group name.
- add or remove users in the group. When you remove a user from a group, the group is removed from the user profile. (You may need to refresh the page to see the removal of the group).
- add or remove products and roles in the group (custom or system roles).
- edit the group description.
You cannot make any edits to internal groups (the Everyone group). For product groups, you can only add or remove users.
- Go to Group Access in the Opti ID Admin Center.
- Click the group name of the group you want to edit, then click Edit, or click More (...) > Add user to group.
- Make your desired edits as described in step 3 of the Add a custom group section.
- Click Save when you are done editing the group.
Delete a custom group
When you delete a group, it is removed from the group list and user profiles. You can only delete custom groups.
- Go to Group Access in the Opti ID Admin Center.
- Click More (...) > Delete group.
- Click Delete Group to confirm.
Please sign in to leave a comment.