Issue 4 May 2005 129
Chapter 6: Configuring user groups
The User Group function is used to setup and maintain logical groups in which the individual
VPN users reside.
User groups have a single-level hierarchy - you cannot have a user group within another user
group.
A User Group Object is a method for simultaneously managing many user objects (remote
users). For example, all remote users, who are in sales, can be consolidated into a single user
group. Then that group can be associated with one or more VPN objects. Without user groups,
remote users would have to be individually associated with a VPN object.
User groups are easy to create and configure. You give them a name then populate them with
user objects.
Users can belong to more than one user group. When this is the case and policy conflicts exist,
permit wins over deny (user group settings override individual user settings).
User groups can be created at anytime. But since they are configured with user objects, you
should configure users before configuring user groups.

New user group

To create a user group:

1. From the VPNmanager console main page, Click New Object and select User Group. The
New User Group dialog is displayed.
2. In the Name text box, type in a name for the new group. Any characters can be used,
except a comma [,].
3. If you want to create more groups, press ENTER, then type in another name.
4. Click Apply, then Close to return to the Configuration Console window.
5. Click Save.
You now configure your new user group.
Note:
Note: Renaming user groups is not currently supported.