SA users and user groups

An SA user group represents a role and defines the set of permissions needed to perform that role. You grant a set of permissions to each user group and then assign users to one or more user groups. Each user group grants a set of permissions to all the users who belong to that group.

All users can belong to one or more SA user groups. The tasks that a user is authorized to perform are defined by the user groups of which the user is a member.

Each SA user group:

• Represents a role, which is a set of tasks and responsibilities.
• Defines a set of permissions that enable the set of tasks needed to perform that role.
• Contains the set of SA users who perform that role.

The following figure shows two example user groups. One is for compliance managers whose role is to run audit reports and ensure compliance of servers to corporate policies; the other example user group is for system operators whose role is to monitor servers and install software and patches. Each user group contains a set of permissions and a set of users:

Contents of User Groups, Based on Roles

SA provides a set of predefined user groups, but you can create your own user groups to match the roles in your organization. For more information, see Predefined user groups.