Google Directory Security Groups

Google Directory Security Groups are analogous to Security Groups in on-prem Windows Active Directory. They are Security Principals, which means they can be used to secure objects in Google Directory. Bydefault security groups are mail enabled type. They can be created natively in Google Directory, or synced from Windows AD with Google Directory. Their membership can be static, or it can be generated dynamically with rules.

Note- This is an optional step, you can skip this step if you do not want to assign any security groups by clicking on the Save&Next button.

Figure 1. Security Group Assignment step

How to create a Rule for assigning Security Groups to users?

Once you are on this step you will see a section under the heading Security Group Membership. This section represents a rule based on which security groups can be assigned to selected users.

Figure 2. Define Security Group Mapping Rule Form

Following are the steps to create a rule -

1. Firstly, you can set up the filters to select the users you want to assign Security groups to. You can create a filter using the following steps -

   • Click on "Choose Attribute" and select employee attribute and operation you want to apply to match that attribute.
   • Next, you get a "Value" field where you type the value you want to match the attribute with and also choose the OU you want to assign.

   

   Figure 3. Example of a filter

2. You can add multiple filters using the "AND" and "OR" logic. These logics can be added using the : button present on the right of the value input field.

3. You can add and remove multiple rows of the above filters using + and - buttons respectively inside the box.

   

   Figure 4. Security Groups dropdown to select Groups.
   4. You can add multiple mappings using "Add a rule" button.
   
   Figure 5. Add a rule button.

Adding default security groups to all users

Additional to rule based security groups, all employees will also be assigned with default security groups. Simply search and select the security groups you want to apply to the entire company.

Figure 6. Default Security Groups Box to add default security groups

Import And Export Mapping Rules

Using this feature, you will be able to import all the mapping rules by uploading a .csv or .xlsx file. Also, you can export all the mapping rules as a .csv/.xlsx file.

Figure 7. "Import/Export Mapping Rules" button.

To Import or Export a file you have to first click on Import/Export Mapping Rules button. Clicking on this button will open a Dialog box containing two tabs, one is for importing and other is for exporting the mapping rules. By default if the form is valid you will be redirected to Export tab otherwise the Export tab will remain disabled and you will be redirected to the Import tab.

Importing mapping rules

Steps for importing file:

1. Choose Import tab from the dialog box.

   

   Figure 8. Dialog Box For Importing .xlsx or .csv File

2. Now Click on Choose File button to choose the file you want to import. Clicking on button will open file directory from which you can select .csv or .xlsx file.

   

   Figure 9. "Choose File" button for choosing file to be imported.

   

   Figure 10. Windows Tab for choosing .xlsx or .csv File.

3. After doing first 3 steps please wait while your file gets imported and rules get created.

Note - There is the specific format to import file. You can get the format by exporting some mapping rules.

Exporting mapping rules

Steps for exporting file:

1. Choose Export tab from a dialog box.

   

   Figure 11. Dialog Box for Exporting File.

   

   Figure 12. File Formats To Export.

2. Now Select the file format from the dropdown and click on Export button. Once clicked your file will get exported in the selected format and the name of the file will be Hire2Retire_SG_Mapping_(TimeStamp).

   

   Figure 13. "Export" button.