This article describes how to check from where the user inherits the assignment for an app when the user is part of multiple groups that are assigned to an application.
- Group App Assignments
- User Administration
When users are assigned via group to an application, they inherit the assignment options from the group they are a part of (licenses, roles, etc.). However, if the application has multiple groups assigned and users are part of more than one group, they will inherit the assignment options from the higher priority group.
For example:
- If an application has 4 groups assigned to it (each with their own licenses/roles/attribute values) and are prioritized like:
-
Group 1
-
Group 2
-
Group 3
-
Group 4
-
- If a user is part of more groups, they will inherit the licenses/roles/attribute values from the higher priority one, for example:
-
If a user is part of Group 1 and Group 2, as "Group 1" has a higher priority than "Group 2", the user will inherit the assignment options from "Group 1".
-
If a user is only part of "Group 2", they will inherit the assignment from "Group 2" even though it has a lower priority
To see which group handles the user's assignment (where they inherit the attributes/roles/licenses/etc.), check the user's assignment by clicking on the Edit button next to the user's username on the Assignments tab.
Steps to see from which group the user inherits the assignment:
-
Assign Groups to App and give each group the necessary attributes/roles/licenses/etc.
-
Set Group Priorities by simply dragging from the left dots, the Group in the correct order.
-
To see users assigned to the app, go to the People section on the left in the Assignments tab and click on the Edit (pencil icon) button next to the user's username.
-
Here, the group from which the user inherited the attributes/roles/licenses set in step 1 should be visible at the bottom of the prompt. Since Group 1 is set first in the hierarchy, the user gets the attributes accordingly.
-
If the admin wishes to manually override the values, this can be done by selecting Administrator (overrides group) option from the top of the prompt.
6. This will allow the admin to set any value and override the inherited group attribute values.
The above applies to use cases where the option to combine values across groups is not being used.
