User Groups
===========

User Groups, not to be confused with Resource Groups, are used in conjunction with Roles to grant permissions
to Basic Users. User Groups are simply a list of users linked to a list of Roles. This allows for
very flexible and reusable permissions organization.

For example, take the simple usecase of granting view access to security audit teams. Both users and
resources under review will change over time.

Start by creating a new group. 

.. figure::  /images/identity_management/groups_empty.png
   :align:   left

.. figure::  /images/identity_management/groups_create.png
   :align:   left

Then select 'Manage Users'.

.. figure::  /images/identity_management/groups_assoc_users.png
   :align:   left

Both Manage Users and Manage Roles are multi-select widgets where you can Add and/or Remove choices.
Clicking Submit will sync the changes.

.. figure::  /images/identity_management/groups_assoc_users2.png
   :align:   left

.. figure::  /images/identity_management/groups_assoc_roles.png
   :align:   left

Since this is fresh install, no Roles have been created thus no access has been granted. The next section will
cover creating Roles and mapping them to resources.

Actions
-------

The following actions are available to modify User Groups.

  * Rename: Rename group.

  * Manage Users: Add and/or Remove users.

  * Manage Roles: Add and/or Remove roles.

  * Delete: Delete group.