Create a WebTools group using AD group membership

Make a WebTools email or permissions group that uses AD for membership

 

(SCS IT Only) Select or create the Active Directory (AD) group

  • Whether you're using an existing AD group or creating an AD group specifically for WebTools synchronization (such as a "WebTools admin" group):
    • Be sure the group is a "universal group"
    • Add "WebTools" in the description (and name, if creating a new AD group) so we know it's being used for this
    • Give the group a good name and description with "WebTools" in the name, description, or both
  • Open the group in ADUC and click on Security
  • Add "ows-group-manager" and give "Read" access

NOTE:  WebTools can handle nested groups, but "ows-group-manager" must have read access on all nested groups

Create the WebTools group

  • Go to the WebTools website - https://webtools.illinois.edu/
  • Click on Groups in the top banner
  • Click on the orange Create button
  • For the group type, select Active Directory Sync: Email Distribution or Active Directory Sync: Security and Privileges depending on your need
  • For the Administrator, select Group, then choose “SCS Admins”.
  • Click on the blue Create group button

Name the WebTools group

  • Add a group name and description
  • In the "AD group name" field, type the name of the AD group you want to use and click Search
  • A box titled "Search Results (choose one...)" will appear with all matching results, even if there is only one (1) matching result. 
    • If no groups match your search, you will need to go back and ensure that "ows-group-manager" has "read" access to the AD group
  • Click on the AD group that you want to use. 
  • The screen will change, showing the AD group name and the DN (distinguished name).
  • Click on Sync now.
  • A box will pop up asking if you want to sync the membership immediately.  Click OK

Group Permissions

Set permissions to give people ability to view/ use the group and to administer it.  

Add "SCS Admins" to the group Administrators

  • Click on the Permissions tab at the top
  • Scroll down to the "Administrators" section
  • Click the down-arrow under "Select group" and choose SCS Admins - this will give SCS IT the ability to help with the group if a problem arises
  • Click Save

Recommended: Create a WebTools group for the people who should be able to use this group, and add that WebTools group to the "Viewers" of this group. 

So, if ChBE wants a "chbe grads" WebTools group, consider making a "ChBE grads senders" WebTools group that would have sync with a personnel group such as "chbe-all-staff" or "chbe-staff-civilsvc". 



Keywords:
Active Directory groups sync email+ email 
Doc ID:
129856
Owned by:
Jay G. in School of Chemical Sciences
UIUC
Created:
2023-07-19
Updated:
2024-09-19
Sites:
University of Illinois School of Chemical Sciences