8.1 Managing Advanced Edition Users and Groups

Perform the following steps in Azure AD:

1. Add groups based on your requirement.

2. Assign roles and API permissions for SecureLogin.

   The required permissions are User.Read, User.Read.All, and Group.Read.All. For more information, see Enabling Role-based Access and Token Validation.

   Roles can be user or admin. To assign a role, perform the following steps:

   1. Under your tenant, select Enterprise applications.

   2. Select your client application > Assign users and groups.

   3. Assign roles (User or Admin) to the users and groups as required.

3. Add SecureLogin users to the appropriate groups if you want to manage users at the group level.

   For information about how to create a group and add users to a group, see Microsoft documentation.

Perform the following steps in SLManager to manage the SecureLogin groups and users:

These steps are for managing settings at the group level. You can perform the similar steps to manage settings of an individual user.

1. Open SLManager.

2. Expand Groups and select the group for which you want to apply or modify settings.

3. Click Distribution > Load.

4. Select the settings you want to import and apply to the group:

   Setting	Description
   Applications	Imports all configured application definitions.
   Credentials	Imports all credentials excluding passwords.
   Password Policies	Imports password policies.
   Preferences	Imports manual preferences.

5. Click OK.

6. Select the SecureLogin script (ESX) file containing the required settings.

7. Click OK.

   The imported settings are applied to the group and all members. When you add a new user to this group later, the user inherits all these settings.

   NOTE:User-level settings take precedence over the group settings.