Account group management

This section details on how to create, delete and update account group settings.

Creating a static account group

Log in as an admin user.
Navigate to Manage → Click on Account Groups from the Account Management section.
Click + Add Account Group.
Account Group Name: Enter the desired name.
Group Description: Enter a desired account group description.
Method: Static Group.
Enforce Comment: Enable this option only if you want to ask for comment for access to every account associated with this account group. If enabled, select Comment Min Length. The default is 1 that enforces entering a minimum of one character/letter, and at the time of access, you can increase it as per your requirement.
Allow Access Via APIs: Enable this option to access the accounts in an account group via management APIs. Refer to API - Get Accounts by Account Groups for more details.
Required Ticket Number (optional): Only enable this option if you want to validate the ticket from the ticketing tools. Refer to Integrating Ticketing Systems for all the supported tools.
Note: If the "Required Ticket No" option is enabled, the requesting user needs to specify the ticket number for the sessions. The ticket number will be validated using the Service Desk or other related configuration. If the ticket validation is unsuccessful, the user will get an error message on the screen. The user can create a workflow request for access or a password if the ticket is validated successfully.
Click Save to save the configuration.

The system allows adding accounts manually only to static account groups.

Login as an admin user.
Navigate to Manage → Click on Account Groups from the Account Management section.
Click + Add Account Group.
Account Group Name: Enter the desired name.
Group Description: Enter a desired account group description.
Method: Attribute Based Group.
Select the desired attribute refer to the Rule-Based group section from Working with account groups.
You can also add multiple attributes by clicking on the + button.
Enforce Comment: Enable this option only if you want to ask comment for access to every account associated with this account group. If enabled, select Comment Min Length. The default is 1 which enforces to enter a minimum of one character/letter and at the time of access you can increase as per your requirement.
Allow Access Via APIs: Enable this option to allow access to the accounts in an account group via management APIs. Refer to API - Get Accounts by Account Groups for more details.
Required Ticket Number (optional): Only enable this option if you want to validate the ticket from the ticketing tools. Refer to Integrating Ticketing Systems for all the supported tools.
Click Save to save the configuration.

To enable the working of Attribute-based account groups you need to start the service by referring to Manage dynamic mapping of accounts.

Login as an admin user.
Navigate to Manage → Click on Account Groups from the Account Management section.
Select the account group you want to operate.
Select delete option.

Deleting an account group deletes policies implemented at the account group level. All accounts are still available in the account inventory.