Edit the membership of an Access Control Management (ACM) group

On this page:


Edit a group

To edit an ACM group for which you are an editor:

  1. Go to Access Control Management (ACM) and then, under "My Groups", click the name of the group that you want to edit.
    Note:
    If you see "All Groups" instead of "My Groups", click the slider labeled "Display only my Groups" to switch it from Off to On.
  2. On the "Edit Group" page, under "Members", add or remove users and/or groups:
    • To remove a user, click the x next to the user's name.
    • To add users, either one at a time or in bulk (using IU usernames and/or existing IU ADS groups):
        • Add users one at a time: Under "Members", to the right of "Users", click the Add user icon:
          Click the 'Add user' icon to add an individual user to a group in Access Control Management (ACM)

          Alternatively, click the down arrow adjacent to the Add user icon, and then select Add user.

          In the "Add user" window, enter the person's full name or IU username, or a group account username, into the "Display name or username" field. When entering a person's full name, you can type the first name followed by the last name, or type the last name followed by a comma and the first name.

          As you type, ACM will prompt you with potential matches; click the appropriate name to select it, and then click Add. The selected user will appear on the "Create group" page, under "Users".

          Note:
          Inactive users, or any group accounts owned either by inactive faculty or staff members, are added to your group as provisional members, are displayed in the "Inactive IU account" box, and will not be granted access privileges. For more, see this document's Member status section.
        • Add individual users in bulk: Under "Members", to the right of "Users", click the down arrow adjacent to the Add user icon, and then select Add users in bulk:
          Click the down arrow and selecting 'Add users in bulk' in Access Control Management (ACM)

          In the "Add users in bulk" window, enter multiple personal or group account IU usernames, each separated by a comma, into the "Usernames separated by commas" field.

          When you're finished adding usernames, click Add. The selected users will appear on the "Create group" page, under "Users".

          Notes:
          • ACM will display an alert for any usernames that could not be located. A separate alert will display for any usernames that are already in the "Users" list.
          • Inactive users, or any group accounts owned either by inactive faculty or staff members, are added to your group as provisional members, are displayed in the "Inactive IU account" box, and will not be granted access privileges. For more, see this document's Member status section.
        • Add members of an existing ADS group: Under "Members", to the right of "Users", click the down arrow adjacent to the Add user icon, and then select Add users from ADS group:
          Click the down arrow and select 'Add users from ADS group' in Access Control Management (ACM)

          In the "Add users from ADS group" window, enter the desired ADS group into the "ADS group name" field.

          As you type, ACM will prompt you with potential matches; click the appropriate ADS group to select it, and then click Add. The members of the selected ADS group will appear on the "Create group" page, under "Users".

          If desired, repeat the process to add members of another ADS group.

          Notes:
          • ADS groups with more than 1,000 users cannot be imported into ACM. If you attempt to import a group with more than 1,000 users, you will receive a warning indicating that the import won't be done.
          • If the membership of an ADS group changes after you create your new ACM group, those changes will not be reflected in your group.
          • ACM will display an alert for any usernames that are already in the "Users" list.
          • Inactive users, or any group accounts owned either by inactive faculty or staff members, are added to your group as provisional members, are displayed in the "Inactive IU Account" box, and will not be granted access privileges. For more, see this document's Member status section.
  3. When you're finished editing your ACM group, click Save to save your changes. To quit without saving your changes, click Cancel.

Check the compliance status

On an ACM group page, under "Members", you can add or check compliance requirements. Click the Require Compliance arrow to enable the options; all options are disabled by default. Choose any compliance requirement to apply it for all users wherever the group is used, and to enforce IU's requirements for signing the Acceptable Use Agreement and taking the FERPA tutorial and HRMS Data Use tutorial. If users are not in compliance with the chosen options, the page will highlight the user with an alert about the missing compliance requirements. Compliance requirements are also enforced for any subgroups nested in this group.

Member status and inactive users

Active and compliant users are added to your group as full members and are displayed with white backgrounds. Only full members are granted access privileges.

If compliance requirements are in place for the group, non-compliant users are added to the group as provisional members and are displayed in a box titled "Out of compliance".

Inactive users, or any group accounts owned either by inactive faculty or staff members, are added to your group as provisional members and are displayed in an "Inactive IU account" box. Occasionally, retired faculty or staff members should not be considered inactive, so that they can access university resources such as Tableau reports. In such cases, contact UITS Identity Management Systems (IMS) via the IMS ACM Support Form to request an exception for the user.

This is document bduj in the Knowledge Base.
Last modified on 2023-07-06 14:00:29.