Managing user-group associations¶
You can use the Access Control Command line to manage user-group associations.
You can import User-Group Associations in a user-editable .xls spreadsheet file.
The syntax for importing a User-Group Association spreadsheet from the command line interface is
The structure for the User-Group Association import spreadsheet is the same as the structure of an exported User-Group Associations spreadsheet.
There is a sheetIndex sheet which has logical and Excel names columns. The logical name is a path to the group and the Excel name is an internal name of an Excel sheet. Due to length and character set limitations, the actual group path is not used directly as a sheet name.
- Each group is represented by a sheet with the login IDs of currently associated members.
- To find a group, switch to sheetIndex, click on a target group path (paths in the logical name column are hyperlinks) and the sheet with its members is selected automatically.
-
To add a member to a group, type the login name.
-
To delete a member from a group, select the whole row and click Delete from the menu.
When editing associations by adding or removing login IDs, consider the following:
- A user added into a subgroup is automatically added to all parent groups in the group's path.
- A user deleted from a group must also be deleted from any sub-groups. For example, if “user1” is a member of a parent group and a child group and you delete it from the parent, you must also delete it from the child group. Failing to delete the user from both groups will cause an error upon import.
An entire sheet can also be deleted in a workbook so that all existing users are preserved upon import (for example, a group will be skipped).
You can also export or import a user-group Association spreadsheet by using the System Admin Toolset. For more information on exporting user-group Associations, see Using import and export for Access Control.