Private user groups

Private user groups are intended for migrating scripts into folders in the SA Library. You should not assign permissions to users using private user groups. You should use regular user groups. For more information, see SA users and user groups.

When an SA administrator creates a new user, SA automatically creates a private user group for the new user and assigns the new user to the private user group. The name of the private user group is the user name.

A private user group can contain only one SA user and every SA user can belong to only one private user group. The SA administrator can then assign action and resource permissions to the private user group. The permissions that you specify for a private user group determine what the user can do with SA. Action permissions specify what actions the user can perform; resource permissions indicate the servers on which the user can perform the actions. Global File System (OGFS) permissions cannot be assigned to a private user group.

For example, when an SA Administrator creates a new user with user name john, a private user group john is also created, and a default folder called john is created in the Home directory. The SA Administrator can then assign action and resource permissions to the private user group john.

An SA user can be a member of multiple user groups and belong to the user’s private group. But then the derived permissions of the private user group is not a cross-product of the resource and action permissions of all groups to which the user belongs.

When a user is deleted, SA automatically deletes the corresponding private user group and the default folder for that user is moved to the location /Home/deleted_users in the SA Library.

For more information, see Setting password, account, and session security policies.