Create and manage groups

The Groups page displays external group information retrieved from a repository such as LDAP, ActiveDirectory, or registered SSO groups.

View a group list

To view the list of groups, from the CloudBees CD/RO main menu, navigate to Administration Groups.

The following is a description of the fields at the top of the group list.

Field Name

Description

Find…

(Optional) Enter a name or partial name of groups that match that name.

Maximum results

Maximum number of results to return. The default is 100.

CloudBees CD/RO has no upward limit, but if you select 500 or higher, you might overload your browser and that can cause performance degradation or more serious issues.

Include Inactive Groups

If this option is selected, all groups are returned from AD/LDAP regardless of whether they are known to the CloudBees CD/RO server, assuming that Active Directory or LDAP is configured in the CloudBees CD/RO.
If this option is not selected, only groups known to the CloudBees CD/RO server are returned.

The following are column descriptions for the Groups page.

Column Name Description

Name

Name of the group.

Repository

Repository containing the group. This is usually Local, LDAP, Active Directory, or SSO.

Local means local to the CloudBees CD/RO server. Other names in this column refer to defined directory providers.

Actions

Actions you can perform on the group, including the following:

Details: This opens the Edit Group pop-up screen.

For more information, refer to the Create a new or edit a group section.
- Select OK when done.
DSL Export: This opens the Export DSL screen.
- Enable or disable the appropriate selections for the export format and additional options listed.
- Select Export when done.
Properties: This opens the Properties screen. Properties are the objects related to the group.

Do one of the following:
- Select the + icon to Add Property to the object and complete the fields shown:
  - Property name: Name for the property.
  - Expandable: Enable to allow this property to be referenced for expansion.
  - Place into…: This determines the directory (property sheet) to contain the property.
  - Description: This is a description of the property.
  - Value: Declare a value for the property.
- Select the Add Directory to select the directory for the property.
  - Directory: Enter a name for the directory to be added.
  - Place into…: This determines the directory (property sheet) to contain the property.

For more information about properties, refer to Properties.

Access control: Displays the privileges assigned to the group.

You can also view the inherited privileges.
- Select the + icon to add a privilege.
- Complete the Type field and indicate the permission level (inherit, allow, or deny) for each category (read, modify, execute, and change permissions).
Change History: Displays the change history associated with the group.
Delete: Deletes the group.

View external groups

While you can view external group content, you must go to the LDAP or Active Directory repository to edit external group information. However, you may associate properties with external groups and then use those properties in CloudBees CD/RO.

To configure your existing LDAP and Active Directory account repositories to communicate with CloudBees CD/RO, navigate to Administration Configurations Directory providers.

For more information about Directory providers, refer to Directory providers.

Create a new or edit a group

CloudBees CD/RO supports two types of group accounts:

External groups that are defined in an LDAP or Active Directory system.
Local groups defined in this CloudBees CD/RO server. Local groups are not visible outside of CloudBees CD/RO.

Create a local group

Privileged users can create or edit a local group.

Navigate to Administration Groups screen.
Select the Add group button.

Complete or update the following fields on the New Group or Edit Group pop-up screen.

Field Name

Description

Group name

Name of the group. It must be unique among the other local group names.

Users

Select the users that belong to the group; multi-select from the user list provided.

Personas

Select the personas that apply to this group; multi-select from the persona list provided.

A persona is a logical collection of CloudBees CD/RO pages that are relevant to a specific job role. For more information about personas, refer to Personas.

Nested Groups

This field is displayed only for remote or external groups if the repository (directory provider) to which the user belongs is configured to Recursively Traverse Group Hierarchy.

The Recursively Traverse Group Hierarchy option is selected when the directory provider is defined.

This field displays all nested groups that are members of this group’s hierarchy in the LDAP or Active Directory server.

Select Create when done.

Edit a local group

Privileged users can edit a local group.

Navigate to Administration Groups screen. Do one of the following:
- Select the Details option from the Actions menu. Edit the following:
  - Group name
  - Users – select or deselect users from the list provided
  - Personas – select or deselect personas from the list provided
    
    Select Save when done.
- Select the group name to open the Group details page.
  - Select Edit group name to edit the group name.
  - Select the three-dots menu to view additional information from the Actions menu.
  - Enter characters in the Search… field to filter the group list.
  - Select Include Unregistered Users toggle to include or exclude those users from the list.
  - Select Add user to add a user to the group.
  - Enable the checkbox of the user to be removed from the group and then select the Remove from list button.
  - Select the Personas tab to edit the group personas details.
  - Select the DSL Editor tab to open the DSL Editor.

Delete a group

There are two ways to delete an existing group from the list.

Navigate to Administration Groups.
Do one of the following:
- To delete a single group or multiple groups:
  - Enable the checkbox next to the desired group or groups from the list.
  - Select Delete groups at the bottom of the page.
- To delete a specific group:
  - Select the Delete option from the Actions menu of the group to be deleted.