Skip to content

feat(content): update groups #150

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Apr 14, 2025
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
118 changes: 74 additions & 44 deletions source/modules/administration/groups.rst
Original file line number Diff line number Diff line change
@@ -1,104 +1,134 @@
Groups
======

Groups tab allows to add, modify, delete, search, export groups.
.. image:: images/group_view.png
:alt: GLPIroups - Global view
:scale: 37%

Groups can be defined in a hierarchical structure in order to ease navigation and search.
Groups tab allows to add, modify, delete, search groups.

.. topic:: Example: groups
Groups can be defined in a hierarchical structure in order to ease navigation and search.

::
Management > Division > Service
or
N3 Support > Network > LAN
``Management > Division > Service`` or ``N3 Support > Network > LAN``

Groups can be used in several way to group users by:
* *skills*: for the helpdesk, for example network technicians, or database administrators,
* *organizational groups*: for example all the computers of the management or the accounting department but also set of persons to be notified.

* **Skills**: for the helpdesk, for example network technicians, or database administrators,
* **Organizational groups**: for example all the computers of the management or the accounting department but also set of persons to be notified.

The options available to adjust these behaviors are:


* **Visible in a ticket**: requesting group and/or assignment to this group;
* **Can be notified**: recipient of notifications;
* **Can be supervisor**: only for a :doc:`project </modules/tools/projects>`;
* **May contain**: assets and/or users.
* **Can be manager**: only for a :doc:`project </modules/tools/projects>`;
* **Can contain**: assets and/or users.

In an item form, 2 notions of groups are available:
* *technical group* which indicates which group of people is in charge of the asset (equivalent for a group of the technical manager)
* *group* which indicates to which group of items it belongs.

.. note:: the technical group can allow the automatic assignment of a ticket to a group of technicians, see the ticket categories in the chapter: doc: `Configure dropdowns </modules/configuration/dropdowns/assistance.rst>`. Likewise, it can be used in :doc:`Business rules for tickets </modules/administration/rules/ticketbusinessrules>`.
* :doc:`Technical group </tabs/common_fields/group_in_charge>` which indicates which group of people is in charge of the asset (equivalent for a group of the technical manager)
* :doc:`Group </tabs/common_fields/group>` which indicates to which group of items it belongs.

.. hint:: if all options are set to *No*, the group will not appear in any selection list; this can be useful for a group that is deleted and kept for history or for adding empty groups in the hierarchical structure.
.. note:: The technical group can allow the automatic assignment of a ticket to a group of technicians, see the ticket categories in the chapter :doc:`configure dropdowns </modules/configuration/dropdowns/assistance>`.
Likewise, it can be used in :doc:`Business rules for tickets </modules/administration/rules/ticketbusinessrules>`.

A group can have one or more supervisors, concept which can then be used for notifications, for example to send an email to the supervisor(s) of the group when a ticket is opened, see :ref:`notification management <configure_notifications>`.
.. hint:: If all options are set to *No*, the group will not appear in any selection list; this can be useful for a group that is deleted and kept for history or for adding empty groups in the hierarchical structure.

A **delegation** mechanism allows a user to declare incidents not for himself but for one of the members of this group.
A group can have one or more managers, concept which can then be used for notifications, for example to send an email to the manager(s) of the group when a ticket is opened, see :ref:`notification management <configure_notifications>`.

.. topic:: Example: delegation

an assistant declaring incidents for all persons of the management

The concepts of delegation and supervisor can be configured in the "Users" tab (see below).
The concepts of manager can be configured in the "Users" tab.

Assigning a user o a group is either static and done using the GLPI interface, or dynamic when this is automatically extracted from the LDAP directory.

A group is attached to the entity in which it is created and can then be visible in sub-entities.

From the list of groups, a group can be imported from a LDAP directory via the *LDAP directory link* button if external authentication is used and the "Auth and sync update" authorization is granted in profile. The assignment of users to groups will be automatic, see :doc:`Profiles </modules/administration/profiles/profiles>`. If several directories are configured, the choice between directories is proposed, otherwise the search form is directly accessible.

Depending on how you search for groups (see: doc: `Authenticating users from LDAP directories </modules/configuration/authentification/ldap>`), a **Search filter in groups** and/or a **User search filter** appear: these allow to refine the list to be imported. If GLPI is used in multi-entities, it is necessary to select the destination entity of the group as well as its visibility in the sub-entities.
Depending on how you search for groups (see :doc:`Authenticating users from LDAP directories </modules/configuration/authentification/ldap>`), a **Search filter in groups** and/or a **User search filter** appear. These allow to refine the list to be imported. If multiple entities exist in GLPI, it is necessary to select the destination entity of the group as well as its visibility in the sub-entities.

.. note:: Importing groups cannot be filtered by entity. In addition, no group synchronization function is available.
The only way to refresh from a directory the list of group members is to resynchronize users, see :doc:`Import users from an external source </modules/administration/users/usersimport>`.


Import groups
-------------

.. note:: importing groups cannot be filtered by entity. In addition, no group synchronization function is available. The only way to refresh from a directory the list of group members is to resynchronize users, see :doc:`Import users from an external source </modules/administration/users/usersimport>`.
In ``Administration`` > ``Groups`` > ``LDAP directory link`` (at the top of the page), you have the option to import groups. Depending on the settings made, users will be managed dynamically.

.. warning:: when migrating from a version of GLPI lower 0.80, any manual connection previously carried out on a group coming from the LDAP directory will be lost.
.. image:: images/group_import.png
:alt: add groups from LDAP
:scale: 100%

The different tabs
------------------
For more information go to :doc:`setup LDAP </modules/configuration/authentication/ldap>`

Sub-groups
~~~~~~~~~~
Child groups
-------------

This tab allows to add a subgroup to the selected group and lists the existing subgroups.
This tab allows to add a subgroup to the selected group and lists the existing subgroups. Each subgroup created will also be visible in ``Administration`` > ``Groups``

Used items
~~~~~~~~~~
----------

This tab lists the elements for which the *Group* field corresponds to the current group. The search can be extended to sub-groups as well as to the members of the group (*User* field of the item).
:doc:`Tab Used Items </tabs/common_fields/group>` tab lists the elements for which the *Group* field corresponds to the current group. The search can be extended to sub-groups as well as to the members of the group (*User* field of the item).

See :doc:`Tab "Used Items" </Les_différents_onglets/Onglet_Eléments>`

Managed items
~~~~~~~~~~~~~
-------------

This tab lists the elements for which the *Technical Group* field corresponds to the current group. The search can be extended to sub-groups as well as to the members of the group (*Technical manager* field of the item).
:doc:`Managed Items </tabs/common_fields/group_in_charge>` tab lists the elements for which the *Technical Group* field corresponds to the current group. The search can be extended to sub-groups as well as to the members of the group (*Technical manager* field of the item).

See :doc:`Tab "Managed Items" </Les_différents_onglets/Onglet_Eléments>`

LDAP directory link
~~~~~~~~~~~~~~~~~~~
-------------------

This tab only appears if the "Auth and sync update" authorization is granted in profile; it gathers the information allowing GLPI to find the group and its users in the LDAP directory.

Security
--------

In this tab you can force or not the use of `2FA </first-steps/preferences.html#two-factor-authentication-tab>`_ for a specific group

Users
~~~~~
-----

This tab allows to add a user to this group by defining whether the added user is *delegatee* and/or *supervisor* of the group. It also lists the users of this group with possible search by criteria (delegatee or supervisor) and also in the subgroups of the current group.
This tab allows to add a user to this group by defining whether the added user is *manager* of the group.
It also lists the users of this group with possible search by this criteria and also in the subgroups of the current group.

Notifications
~~~~~~~~~~~~~
-------------

.. figure:: images/notifGroup.png
:alt: List of notifications for which destination is group or group supervisor
:align: center
:scale: 52%

List of notifications for which destination is group or group supervisor

.. include:: /modules/tabs/tickets.rst
Created tickets
---------------

For groups, this tab allows to list as well sub-groups tickets.
List all :doc:`tickets </modules/assistance/problems>` created or assigned to the group.
If a ticket is created by a group member, but the requester is not explicitly the group, the tickets will not be visible here.
``Show all`` allows you to show all tickets created or assigned, you will then be redirected to ``Assistance`` > ``Tickets``

.. include:: /modules/tabs/historical.rst
Problems
--------

List all :doc:`problems </modules/assistance/tickets/ticketopening>` created by the group.
``Show all`` allows you to show all problems created by the group, you will then be redirected to ``Assistance`` > ``Problems``

Changes
-------

.. include:: /modules/tabs/debug.rst
List all :doc:`changes </modules/assistance/tickets/ticketopening>` created or assigned to the group.
``Show all`` allows you to show all changes created by the group, you will then be redirected to ``Assistance`` > ``Changes``

Notes
-----

:doc:`Note </modules/tabs/notes>` lets you add enriched text and attach a document.


.. include:: /modules/tabs/historical.rst

.. include:: /modules/tabs/all.rst
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified source/modules/administration/images/notifGroup.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.