Importing a remote user or user group to the Flex Appliance Console
Follow these steps to import an Active Directory (AD) or LDAP user or user group.
Note:
Nested user groups are supported only when the remote user domain is an Active Directory domain that is connected to the Global Catalog port of a global catalog server (the default is port 3268 or 3269 but the port remains admin-configured). In that configuration, a user in a nested group can sign in when you import the parent group.
See Using a remote user domain in a multi-domain Active Directory forest.
In all other configurations, nested user groups are not supported. To import the users of a nested group, you must perform this procedure for the group that they directly belong to.
To import a remote user or user group
- On the Flex Appliance Console, click the Access management icon in the left-side navigation bar.
- If you have not done so already, connect the remote user domain that the user or the user group belongs to.
See Connecting a remote user domain to the Flex Appliance Console.
- Click Add user > Import remote users.
- Select User or User group.
- Depending on your selection, enter the user name or the group name. If the remote user domain is connected to a global catalog server, you can enter
DOMAIN\nameto import a user or group from any domain in the forest. A name without a domain is looked up in the configured domain only.A name without a domain is looked up in the configured domain only. To exempt the user from multiperson authorization, enter the domain-qualified user name, for example
FLEXAD\user. - Click Import.
After you have imported the user or the user group, you can view the details on the Access management page.
Note:
You cannot view the members of a user group from the Flex Appliance Console. Use the remote server to manage the users within a group.