Creating and managing user groups

A user group is a collection of related users who share common properties. Administering users as a group is more efficient than administering individual users because properties can be added, changed, or removed for all members of the group at the same time. Users can belong to more than one group at a time. When you create and manage a user group, you can assign IT policies, profiles, and apps in the management console. You can also define one group as a member of another group.

You can create two types of user groups:

Directory-linked groups: These groups link to groups in your company directory. Only directory user accounts can be members of a directory-linked group.
Local groups: These groups are created and maintained in
BlackBerry UEM
and can have both local user accounts and directory user accounts assigned to them.

For directory-linked groups,

UEM

periodically synchronizes the membership of the group with its associated company directory groups. Users that were added or removed from the company directory are added or removed from the directory-linked group. When users are added into a company directory group that is linked to a directory-linked group, they are assigned the properties that are assigned to the group. When users are removed from the directory-linked group, the properties are removed from the user.

Each directory-linked group can link to a single company directory. For example, if

UEM

has two

Microsoft Active Directory

connections (A and B), and you create a directory-linked group that is linked to connection A, you can link only to directory groups from connection A. You must create new directory-linked groups for any other directory connections.

Synchronizing directory-linked groups does not add or delete users in

UEM

. To allow

UEM

to create user accounts when new company directory users are created, you must enable onboarding.