Create or Edit Access Groups

Create an access group that maps one or more users (or user auth groups) to a specific role and scope.

To create an access group:

1. Navigate toOrganization > Users & Permissions > Access Groups.
2. On the A10 Control Access Groups page, click + Create.

3. On the Add Access Group page, enter the following:

   Table 48 : Add Access Group

   Field	Description
   Access Group Name	The name of an access group name. It can be up to 128 characters in length and cannot include space and special characters.
   Display Name	The name that will be displayed on the A10 Control Access Groups page.
   Description	Description of the access group. This can be a short description of the access group. The multiple access groups can be created with the same role permissions, so the description field can be used to describe the access group.
   Scope
   Select Role	Select a role from the drop-down. Roles are predefined in A10 Control application, see A10 Control Predefined Roles. When a role is assigned to an access group, all its members are granted with the same permission.
   Scope	The resource type to which the role and permissions apply. The following are the available scope types: Org Units Clusters Service Partitions
   Instance	Depending on the role selected, select the instances of resources. For example, for an Org-Unit Admin role, select an Org-Unit account that users can access the access group.
   Permission	The type of access that the user has for the selected scope and instance. The following are the available permission types: Read & Write Read Only
   User Auth	This section is displayed only when an external or a remote server such as LDAP/LDAPS, Azure AD, Okta, or TACACS+ is configured for authentication and authorization to log in to A10 Control.
   User Auth Group	Map the user auth group from list or text field to login with external user. If the user auth group is configured with LDAP/LDAPS or Azure, the drop-down list retrieves the group information directly from the directory. Select a user auth group from the list. If the user auth group is configured with Okta or TACACS+, then enter the user auth group in the User Auth Group field. For more information, see Manage User Auth.

4. Click Save.

The access group is created and reflected on the Access Groups page.

Edit Access Groups

To edit an existing access group:

1. On the Access Groups page, click the Kebab menu corresponding to the required access group, and then click Edit.

2. On the Edit Access Group page, modify the required details and then click Save.

   The updated group details are saved and reflected on the Access Groups page.