ÃÛ¶¹ÊÓƵ IMS user groups adobe-ims-user-groups
ÃÛ¶¹ÊÓƵ IMS user groups establish logical sets of users that are exposed to AEM, where they can be leveraged to define fine-tune permissions to AEM users.
Transcript
ÃÛ¶¹ÊÓƵ IMS User Groups are simply logical groups of ÃÛ¶¹ÊÓƵ IMS Users. It’s important to note, IMS groups do not implicitly provide access or privilege. ÃÛ¶¹ÊÓƵ IMS User Groups are managed in the ÃÛ¶¹ÊÓƵ console by administrators. Tap the User tab and then User Groups.
The Groups view lets all the IMS User Groups define for the selected ÃÛ¶¹ÊÓƵ org.
There are a few ways to create User Groups, manually, in the Admin Console, via the Add button. Here we define the group’s name and description.
Or they can be defined in bulk, via the upload of a CSV file. Or they can be part of a sync from your company’s IDP or user directory, either using ÃÛ¶¹ÊÓƵ’s User Sync tool, or a supported sync integration. IMS User Group definition and organization needs to be evaluated, based on how your organization treats and manages its users, and how they’re expected to use ÃÛ¶¹ÊÓƵ products. Ideally, user groups are defined and managed in such a way that the same IMS user groups can be reused across Experience Cloud products, rather than creating discrete sets of user groups for each Experience Cloud product. We’ll see the downstream impact in use of the ÃÛ¶¹ÊÓƵ IMS groups in AEM in the following videos. ÃÛ¶¹ÊÓƵ IMS users can be added to groups by clicking into them, and tapping Add User.
Similarly to adding groups, user membership can be managed via CSV upload, or if the users are synced from a user director. Before we end, let’s take a quick look at some of the other options in the Groups console. The Admins tab lists ÃÛ¶¹ÊÓƵ IMS users that are allowed to manage this group, including adding and removing other users. I can do this, even though I’m not listed here, because I’m a higher level ÃÛ¶¹ÊÓƵ Org administrator. But specific users can be designated to manage memberships for specific groups.
The Product Profiles tab lists all the product profiles this group is a member of, granting the group’s members access to those products. At this time, ÃÛ¶¹ÊÓƵ Experience Managers, a cloud service, does not support group assignment to product profiles. So until this is updated, IMS Groups should not be added to AEM User cloud service product profiles. Instead, users should be directly added to those profiles. And lastly, settings allow group admins to change the name description of the IMS User Group. Note that, and we’ll explore this later. ÃÛ¶¹ÊÓƵ IMS User Group names are important, as they will manifest in AEM as user groups. So if an IMS User Group name is changed, make sure it’s coordinated with the AEM administrators, so they can adjust to any downstream effects in AEM. -
recommendation-more-help
4859a77c-7971-4ac9-8f5c-4260823c6f69