Portal Express, Version 6.0
Operating systems: i5/OS, Linux, Windows
Nested groups
This topic has techniques to improve performance with nested groups. The techniques cover having nested groups, turning nested groups off if you are not using them, and having limited nested group function.
- Disabling support for nested groups might improve login performance
- Improving performance if full support for nested groups is not required
Disabling support for nested groups might improve login performance
User groups in the portal can be organized in different structures:- Flat structure: Groups have no subgroups.
- Hierarchical structure with nested groups: Some groups are members of other groups.
If your user directory uses a flat structure, you can disable support for nested groups in the access control component. This can significantly improve login performance for users who are members of many groups.
Disable support for nested groups by changing the following property value in Access Control Data Management Service, as described in Setting configuration properties:
accessControlDataManagement.enableNestedGroups=false
Do not disable support for nested groups if your user directory uses a hierarchical group structure and you need access control inheritance along the hierarchy.
Improving performance if full support for nested groups is not required
If nested group support is required when setting up access control for users and user groups but not when setting up access control on user groups, then change the following property value in Access Control Data Management Service, as described in Setting configuration properties:accessControlDataManagement.enableTargetResourceGroupInheritance=false
If you do not modify these properties or if the portal has many groups that are nested several levels deep or that contains many users, you might experience reduced performance.
Related information