This topic lists techniques to improve performance with nested groups. The techniques cover having nested groups, turning nested groups off if you are not using them, and having limited nested group function.
Nested groups performance
- Disable support for nested groups might improve login performance
- Improving performance if full support for nested groups is not required
Disable support for nested groups might improve login performance
User groups in the portal can be organized in different structures:
- Flat structure: Groups have no subgroups.
- Hierarchical structure with nested groups: Some groups are members of other groups.
If the user directory uses a flat structure, we can disable support for nested groups in the access control component. This can significantly improve login performance for users who are members of many groups. Disable support for nested groups by changing the following property value in Access Control Data Management Service, as described in Setting configuration properties:
accessControlDataManagement.enableNestedGroups=falseDo not disable support for nested groups if the user directory uses a hierarchical group structure and we need access control inheritance along the hierarchy.
Improving performance if full support for nested groups is not required
If nested group support is required when setting up access control for users and user groups but not when setting up access control on user groups, then change the following property value in Access Control Data Management Service, as described in Setting configuration properties:accessControlDataManagement.enableTargetResourceGroupInheritance=falseIf you do not modify these properties or if the portal has many groups that are nested several levels deep or that contains many users, you might experience reduced performance.
Related information
Parent topic:
Tuning