Mapping a Group to a Role

To add a group to an Active Directory domain, you must map an Active Directory group to a specific role.

If the user belongs to a group that is not associated with any role or if the group is disabled, the user will not be able to login to the array

NOTE: For users of systems prior to Windows 2000: If you try to add a group with a name that contains special characters, the special characters are replaced with underscores (_). Whenever you use that group name, you must use the version of the group name that includes the underscores. The group name that contains special characters is not valid.
  1. Map a group to a particular role.
    userauth --add_group group_name --domain domain_name [--role role] [ --description description] [--inactivity_timeout minutes]

    If the role is not specified, the guest role is assigned to the array group.

    If the inactivity_timeout is omitted, the inactivity timeout for the array group is used.

  2. Run the following command to verify that the process completed successfully.
    userauth --list_group --domain domain_name