Mapping AD groups to BlueCielo groups

You can either use the Active Directory groups that are imported as described in Synchronizing users and groups from Active Directory, or you can map those groups to BlueCielo groups that you have created manually. This is particularly valuable if you want to use different group names in Meridian Enterprise Server or to combine multiple Active Directory groups into a single BlueCielo group. When you have the mappings defined the way that you want them, you can export them to import into another system.

To map AD groups to BlueCielo groups:

1. In Meridian Enterprise Server Administration Console, in the System Management group, click USER MANAGEMENT. The Users page appears and lists the existing user accounts.
2. In the menu, click AD SYNC. The Sync User Groups page appears.
3. In the page header, click GROUP MAPPINGS. The list of current group mappings appears. Active Directory groups that have not yet been mapped to a BlueCielo group appear in red text.
   • To filter the list of group names, type the beginning of the group's name in the filter box and then press Enter or click the filter icon . The list is filtered on the text that you typed.
   • To sort the list of AD group names, enable Show mapped groups first. The list is sorted on the AD GROUP column and the groups that have already been mapped appear at the top of the list.
4. Map the AD groups to BlueCielo groups:
• To map an AD group to a BlueCielo group with the same name:
  •  Select the AD group and then click Include. The AD group name is added in the BLUECIELO GROUP column.
• To map one or more BlueCielo groups to an AD group with a different name:
  1. Double-click the AD group name. The GROUP MAPPINGS dialog box appears and lists all of the BlueCielo groups in the left column and the BlueCielo groups that are currently mapped to the selected AD group in the right column.
  2. Double-click the BlueCielo group name that you want to map to or select the BlueCielo group and then click Add. The BlueCielo group name is added to the list of mapped groups.
  3. To unmap a BlueCielo group from an AD group:
     • Select the BlueCielo group that you want to unmap and then click Remove. The group is unmapped.
  4. When you are finished mapping groups, click OK.
• To clear the BlueCielo group mappings for an AD group:
  • Select the AD group that you want to clear and then click Exclude. All BlueCielo groups are unmapped from the selected AD group.

To export the group mappings:

1. In Meridian Enterprise ServerAdministration Console, in the System Management group, click USER MANAGEMENT. The Users page appears and lists the existing user accounts.
2. In the menu, click AD SYNC. The Sync User Groups page appears.
3. In the page header, click GROUP MAPPINGS. The list of current group mappings appears.
4. In the toolbar, click Export. The group mappings are exported to an XML file named UserGroupsMapping.xml that you can edit or import into another system. When the export is finished, the file is compressed into UserGroupsMapping.zip and downloaded by your browser and you are prompted for what to do with it.
5. Save or open the file.

To import the group mappings:

1. In Meridian Enterprise ServerAdministration Console, in the System Management group, click USER MANAGEMENT. The Users page appears and lists the existing user accounts.
2. In the menu, click AD SYNC. The Sync User Groups page appears.
3. In the page header, click GROUP MAPPINGS. The list of current group mappings appears.
4. In the toolbar, click Import.The IMPORT FILE PATH dialog box appears.
5. Click the folder icon . The Open dialog box appears.
6. Navigate to and select the compressed archive file (the default is UserGroupsMapping.zip) that you want to import and then click Open. The filename appears in the Group mappings field.
7. Click IMPORT. The file is uploaded by your browser and the mappings are imported.