Group management issues

Manage groups requires your attention to membership retention in groups. We must be aware of overlapping views if membership occurs in multiple groups, and to the scope of predefined and customized groups.

• Automatic group accounts
  For some predefined groups, we can configure IBM Security Identity Manager to automatically put ISIM accounts of newly named members in the default group. Automatic assignment does not apply to customized groups.
• Group membership
  A user can be a member of more than one group. The user obtains membership in a group either explicitly or by reference.
• Multiple groups and views
  If a user is a member of multiple groups, the user has a merged view of all of the tasks provided to both groups. The user has the merged view, even if one of the groups does not grant access to the task.
• Scope of groups
  The default tasks and associated access control items set the scope of activities for members of predefined and customized groups.

Parent topic: Security planning