Add a Permission Group for Active Directory

This is the Add icon.

The Permissions Group screen lists all of the Permission Groups that have been added. For each of these Permission Groups, Orchid Fusion VMS displays a description of the Permission Group. If the Fusion configuration file has been modified to add the Active Directory server(s), you may add Permission Groups that pull users from your Active Directory.

*For details on modifying the Orchid Fusion VMS configuration file to add the Active Directory server(s), please refer to the Orchid Fusion VMS Installation Manual.

*In the image above, the Active Directory Administrator groups (at the bottom of the list) were created with an older version of Orchid Fusion VMS by modifying the Fusion configuration file. These Administrator groups can now be added just like any other Permission Group, via the Orchid Fusion VMS user interface.

*You may use the default Permission Groups or add new Permission Groups as you deem necessary.

1. Click the Add Permission Group button in the top-right corner of the Permission Groups list. A New Permission Group screen will open.

2. Enter a name and a description for the new Permission Group in the Group Name and Group Description fields.
3. Click on External Group Mapping.
4. Click in the Domain field and enter the name of the domain in which your target Active Directory users exist.
5. Click in the Group field and enter the name of the group in which your target Active Directory users exist.
6. Click the Add icon to add this new external group. As soon as you add the new external group, another prompt will appear so you can enter another group (if needed).
   1. If you don’t have any additional external groups to add, simply click in the white space to the right of the Domain and Group fields.
   2. To remove an external group mapping, click the Delete/Trash Can icon to the right of the group name.

*Available members for an Active Directory Permission Group include all of the users that are already defined in your Active Directory. For more details, please refer to your Active Directory documentation.

*You may add external groups from Active Directory, Azure Active Directory, and FreeIPA to the same Permission Group, if desired.

7. If this Permission Group is going to have all of the permissions that an Administrator has (like adding and deleting Orchid Core VMS servers, Users, and Permission Groups), mark the Administrator Group checkbox. (If marked, no other settings will be required.)
8. If this Permission Group is going to have specific, limited permissions, use the Permissions Granted and Permissions Revoked features.
9. After all of the permissions are set, press the Save Group button.