About File Groups

Associating file groups with domain user groups reduces administrative burden because new user group members inherit application authorization assigned to the parent file group.

The users, groups, and computers assigned to each domain file group are defined within domain controllers as follows.

• You can authorize users directly or indirectly through a user group assignment.
• A user can be a member of more than one user group. A user group member is authorized to use the applications that are approved for the associated user groups.
• Users can have indirect authorization assignments resulting from creating parent-child relationships.
• When you assign a system group or system user a file authorization, the authorization is assigned to the associated users for every computer in your network.
• You can authorize a global user groups to use an application. Any member of a global user group is then indirectly authorized through domain user groups to use that application.