PowerProtect Data Manager 19.9 Security Configuration Guide

Add identity provider group-to-role mapping

Only the Administrator and the Security Administrator roles can add identity provider group-to-role mapping.

1. From the left navigation pane, select Administration > Access Control.
   The Access Control window appears.
2. Click the Users/Groups tab.
   PowerProtect Data Manager displays a list of configured user accounts and external identity provider groups, including any associated roles.
3. Click Add User/Group.
   The Add User/Group window opens.
4. Select AD/LDAP User Group.
5. Select the domain which corresponds to the identity provider for which you would like to add group-to-role mapping.
6. In Groups, start typing the name of a identity provider group.
   PowerProtect Data Manager searches the identity provider and displays any matching groups.
7. Select one or more groups from the list of results.
8. Select one or more roles for all group users.
9. Click Add.