Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
en:services:general_services:idm:idm-portal_documentation [2019/08/22 14:02]
bbrauns [Overview]
en:services:general_services:idm:idm-portal_documentation [2021/02/05 16:13] (current)
ggroesc [Overview]
Line 137: Line 137:
   * Can be shown in Exchange addressbook   * Can be shown in Exchange addressbook
   * [[#​dynamic_exchange_distribution_group | More information]]   * [[#​dynamic_exchange_distribution_group | More information]]
 +
 +**Group management**
 +  * Can act as an Static Exchange distribution group 
 +  * Visible in the Exchange addressbook
 +  * Members are shown in addressbook
 +  * Send permissions can be defined
 +  * Edeting can be limited to certain user
 +  * [[#​group_management | More information]]
  
 ==== Create ==== ==== Create ====
Line 182: Line 190:
 Dynamic Exchange distribution groups are used to add members based on a filter expression. This filter specifies which attribute values an object needs to be part of this group (e.g. all objects with the attribute "​department"​ set to "​A"​). ​ Dynamic Exchange distribution groups are used to add members based on a filter expression. This filter specifies which attribute values an object needs to be part of this group (e.g. all objects with the attribute "​department"​ set to "​A"​). ​
 <WRAP center round tip 60%> <WRAP center round tip 60%>
-You can easily create a distribution group for all members of the department "AG I" by using the filter ​"​**( ​department -eq 'AG I')**\\ All new staff will automatically be added to this group if the department is set to **AG I**."+You can easily create a distribution group for all members ​(normal user) of the department "AG I" by using the filter
 + 
 +''​$usertype -eq '​0'​ -and $department -eq 'AG I' ​''​ 
 + 
 +All new staff will automatically be added to this group if the department is set to **AG I**." 
 +</​WRAP>​ 
 + 
 +<WRAP center round important 60%> 
 +When using multiple filters be aware of logical interpretations of those filters and its grouped components. 
 +Using parentheses might be very useful or even necessary!  
 + 
 +For example: Addressing all normal user in two departments. 
 + 
 +**False**: just lining up each expression:​ 
 + 
 +''​$usertype -eq '​0'​ -and $department -eq 'AG I' -or $department -eq 'AG O' ''​ 
 + 
 +This will address all normal user for the department 'AG I' but for 'AG O' it will also address all other possible user types (**including distribution lists**). 
 + 
 +**Right**: To ensure only normal user are addressed in both departments the conditions need to be separated and grouped. 
 + 
 +''​$usertype -eq '​0'​ -and ($department -eq 'AG I' -or $department -eq 'AG O'​)''​ 
 + 
 +or, without parentheses,​ be defined for each condition:​ 
 + 
 +''​$usertype -eq '​0'​ -and $department -eq 'AG I' -or $usertype -eq '​0'​ -and $department -eq 'AG O' ''​ 
 </​WRAP>​ </​WRAP>​
  
Line 194: Line 228:
 |$usertype |User type (0 = normal user, 1 = time based user, 2  = course user, 4 = function account) | |$usertype |User type (0 = normal user, 1 = time based user, 2  = course user, 4 = function account) |
 |$userstatus |User status (0 = active, 1 = disabled, 2 = delete) | |$userstatus |User status (0 = active, 1 = disabled, 2 = delete) |
 +|$gender |Gender: Valid values are (M/W/D), for example: $gender -eq '​W'​ |
 +|$institute |Institution |
 |$filterattribute1 |User defined attribute | |$filterattribute1 |User defined attribute |
 |$filterattribute2 |User defined attribute | |$filterattribute2 |User defined attribute |
 |$filterattribute3 |User defined attribute | |$filterattribute3 |User defined attribute |
 +|$emailaddresses |EMail addresses have to be defined in the following way, for example: $emailaddresses -eq '​example@gwdg.de'​ |
  
 **Valid operators** **Valid operators**
Line 206: Line 243:
 | -or |Or | | -or |Or |
 | -not |Not | | -not |Not |
- +==== Group management ==== 
 +=== Overview === 
 +Without providing an email address groups are just a structural organisation tool. When an email address is given they turn into a [[#​static_exchange_distribution_group | Static Exchange distribution group]]. When 'Only editable by "​Managed by"'​ is checked the editing of the groups can be limited to certain user. <WRAP center round important 60%> 
 +Be aware '​managed by' can exclude and lock out the creator of the group. Avoid to add other groups or distribution groups as '​managed by'. Privileges for editing are not derived to their members. 
 +</​WRAP>​