Users Configuration | 315Primary groups - Used to assign simple policies, such as timeouts and the ability to add/editbookmarks. Advanced policies, such as URL or network object policies, may come from primaryor additional groups.Additional Groups - Multiple additional groups may be assigned, but in the case of conflictingpolicies, the primary group will take precedence over any additional groups.Keep in mind that users can only belong to groups within a single domain.Deleting a GroupTo delete a group, click the delete icon in the row for the group that you wish to remove inthe Local Groups table on the Users > Local Groups page. The deleted group will no longerappear in the list of defined groups.Note A group cannot be deleted if users have been added to the group or if the group is the defaultgroup created for an authentication domain. To delete a group that is the default group foran authentication domain, delete the corresponding domain (you cannot delete the group inthe Edit Group Settings window). If the group is not the default group for an authenticationdomain, first delete all users in the group. Then you will be able to delete the group on theEdit Group Settings page.Adding a New GroupNote that a group is automatically created when you create a domain. You can create domainsin the Portals > Domains page. You can also create a group directly from the Users > LocalGroups page.The Users > Local Groups window contains two default objects:• Global Policies - Contains access policies for all nodes in the organization.• LocalDomain - The LocalDomain group is automatically created to correspond to the defaultLocalDomain authentication domain. This is the default group to which local users will beadded, unless otherwise specified.To create a new group, perform the following steps:Step 1 Click Add Group. The Add Local Group window is displayed.Step 2 In the Add Local Group window, enter a descriptive name for the group in the Group Namefield.Step 3 Select the appropriate domain from the Domain drop-down list. The domain is mapped to thegroup.Step 4 Click Accept to update the configuration. Once the group has been added, the new group willbe added to the Local Groups window.All of the configured groups are displayed in the Users > Local Groups page, listed inalphabetical order.
