Apple Mac OS X Server (Administrator’s Guide) - Manual (Page 168)

168 Chapter 3
In Workgroup Manager, use the Members tab in the group account window to work with
member settings.
When the name of a user in the Members list appears in italics, the group is the user’s
primary group.
Adding Users to a Group
Add users to a group when you want multiple users to have the same file access privileges or
when you want to make them managed users.
When you create a user account and assign the new user a primary group, the user is
automatically added to the group you specify; you do not need to explicitly do so. Otherwise,
you explicitly add users to a group.
You can use Workgroup Manager to add users to a group if the user and group accounts are
in a NetInfo or LDAPv3 directory domain.
To add users to a group using Workgroup Manager:
1 In Workgroup Manager, open the group account you want to work with if it is not already
open. To open the account, click the Account button, then use the At pop-up menu to open
the directory domain where the account resides. Click the lock to be authenticated. Select
the group in the group list.
2 Click the Members tab.
3 Click Add to open a drawer listing the users defined in the directory domain you are working
with. (To include system users in the list, choose Preferences on the Workgroup Manager
menu, then select “Show system users and groups.”) Make sure that the group account
resides in a directory domain specified in the search policy of computers the user will log
in to.
4 Select the user, then drag it into the Members list on the Members tab.
Removing Users From a Group
You can use Workgroup Manager to remove a user from a group that is not the user’s
primary group if the user and group accounts reside in a NetInfo or LDAPv3 directory
domain.
To remove a user from a group using Workgroup Manager:
1 In Workgroup Manager, open the group account you want to work with if it is not already
open.
To open an account, click the Account button, then use the At pop-up menu to open the
directory domain where the account resides. Click the lock to be authenticated. Select the
group in the group list.