How to Create, Modify and Delete a Group

Create a Group

Groups are created the same way as users, that is to say, within an already created profile. Groups are useful to cover groups of users that do not need a dedicated account. In this example we will set up a Visitors group.

Creating a User object below a Profile assigns that user to the Profile, this means that the User will inherit all the permissions and privileges from that Profile. See the section below on de-assigning an existing User object.

Group objects are designed to be used in conjunction with Windows Accounts and Windows Active Directory accounts. They can then be used to log in to DataStudio using the Windows Authentication option.

To create a new group navigate to the Access Model panel and right click the Guest User profile (or the profile you wish the group to be assigned to).
Select Admin Group from the context menu.

Figure 1. Create Group - Context Menu

In the object creation wizard specify an Object Name that will be used in the system. Enter the Authenticating Domain and the Account Name of the group. This could be an account for the host machine or some other authenticating domain. Click Create to create the new group in the Access Model tree.

Figure 2. Create Visitors Group - Common Settings

Authenticating Domain and Account Name need to be resolvable by the Core service in order to authenticate using Windows Authentication. Be sure that the Authenticating Domain and Account Name correspond correctly to existing domain and user accounts to gain access to the system using this authentication method.

Click on the User object in the Access Model panel, the configured properties can be seen in the Object Properties panel.

Figure 3. Group in the Access Model Panel and the Object Properties Panel

Log in to Windows using the corresponding account and then you can use the Windows Authentication option to log in to DataStudio. The User account inherits the permissions and privileges of the parent Profile object.

Modifying a Group

Once a Group object is created, it can be modified by changing the properties in the Object Properties panel (if logged on with in profile with administrative privileges).

For example, the Authenticating Domain can be modified in the "Visitors" Group object.

Modify Group properties in the Object properties panel

To confirm the modified property changes, click Apply.

Deleting a Group

Once a Group is created, it can also be be deleted (if logged on with in profile with administrative privileges).

To do this, select the Group object in the Access model, right click and select Admin Delete Object from the context menu. You can also select the object and use the Delete key.

Before the object is deleted you will be asked if you really want to go ahead with the deletion.

Figure 4. Delete Object Confirmation

Click Yes to proceed.

De-assigning a Group from a Profile

A Group can be de-assigned from a Profile by either deleting it (see above) or disabling the Group object in the Access Model.

To disable the Group object, select it in the Access Model, right-click and select Admin Disable Object from the context menu. You can also select the object and use the F9 shortcut key.
Before the object is disabled you will be asked if you really want to go ahead and disable the object.

Figure 5. Disable Object Confirmation

Once a Group has been de-assigned it can no longer be used to login to the system using the Windows Authentication method.

The Group object can be enabled again by selecting Admin Enable Object from the context menu. You can also select the object and use the F9 shortcut key.