DataIQ 2.2 Admin Guide

Use inherited Active Directory groups

If you have configured Active Directory, you can import groups, and then assign the group to a DataIQ role (for example, Data Users).

1. From the Settings tab, select Access and Permissions > Add inherited groups. (The Add inherited groups option only appears after configuring DataIQ to source users from Active Directory.)
2. In Enter distinguished name for each group to inherit from LDAP provider, enter the distinguished name (DN) of the group, with each DN on a separate line. For example: where Group Name = itleads and AD Domain = example.myorganization.org:

   cn=itleads,dc=example,dc=myorganization,dc=org

3. In LDAP administrator user and Password, add the bind distinguished name (DN) credentials for a user that has access to locate the LDAP groups to inherit. For example:

   cn=admin,dc=example,dc=myorganization,dc=org

4. In the list of groups, select the down-arrow ( ) next to the group that you inherited, and select Edit Group.
5. Select ⊕ Add role to group, and select one or more roles to add to the group.
   NOTE If you add a user, but do not add a role, the user will not be able to log in to DataIQ.