Skip to main content

Overview of user accounts and user groups

User accounts represent people who have access to the application. User groups collect user accounts in order to make it easier to manage access to the application features.

User accounts and user groups​

A user account represents a person who is using the application. Each user account has associated content, including the person's profile. For all users, you can use the Admin Console to change their user name and password, view and delete the content they've created, and view and edit their profile information. You can also disable users, for example when they're no longer involved, but you want to keep their content. For more information, see Managing user accounts.

A user group makes assigning and managing permissions easier by gathering users into one group. The existence of user groups isn't visible in the application's user interface unless you use role badges for the group. For example, you might create a group of human resources workers so that you can give them (and only them) permission to view potentially sensitive information about employees in a Benefits space. A user group is made up of members, who typically aren't aware they're in the group, and group administrators, who have access to the Admin Console for managing group settings and membership. For more, see Managing user groups.

System administrators, user administrators, and group administrators can use the Admin Console to add, remove, and edit accounts for users and user groups. Note that system and space administrators can set up permissions for users and user groups, but user and group administrators cannot do this. For more information about setting up permissions, see Managing permissions.

External user identity systems​

The work you do with user accounts and user groups depends heavily on whether the application is connected to an external user identity management system. Generally, when you add user accounts and user groups by using the Admin Console, you're adding that data to the same database used to store content. This isn't typically the case if the application is connected to an external user identity system such as LDAP or Active Directory. In that case, much of the information about users is coming from — and managed within — the external system.

By default, even if your community uses an LDAP or Active Directory database (or some custom solution), users added through the Admin Console are incorporated into the application's database, not the external system. It is also possible that user accounts are managed by the external system, while the groups they belong to are created and managed locally in the application database. How user groups are managed is defined when the external system is connected to the application.

For more information on connecting an external LDAP or Active Directory system, see Setting up LDAP and Active Directory.

User registration​

You can configure the application so that users can register on their own. When you enable user-created accounts, people can register by entering basic required registration information (such as a user name and password), along with user profile information. They can also invite other people to join the community.

For information on configuring registration, see the Configuring self-service user registration.

Related

Managing user accounts and user groups