This article applies to organisations with a 'Hybrid' setup (both On-Premise Appliance and Cloud), as well as On-Premise only and Cloud only setups.
Smoothwall comes with three built-in User Groups: Default users, Banned users and Unauthenticated IPs Groups.
You can create custom User Groups to map groups from your organisation’s directory service. Custom User Groups can be used in Web Filter Policies or for Safeguarding Alerts.
User Group Naming Conventions
We recommend using a naming convention for your User Groups, to ensure consistency and clarity. For example if a User Group contains only Staff members, you could call it “Tenant Name - Staff Only”.
The User Groups are listed alphabetically, so you could label your most used User Groups accordingly to have them appear at the top of the list.
Naming Requirements:
- You must use at least one character, up to a maximum of 128 characters.
- You can use any special characters, apart from having a name made up of only spaces.
- You cannot use a name that has already been used for a Global User Group, or that has been used for a User Group that already exists for your Tenant.
On-Premise Appliance
Important
- You can’t add User Groups for specific tenants in On Premise Appliance, only Global User Groups. If you have a Hybrid setup (both Cloud and On-Premise Appliance), set up User Groups for specific tenants in Cloud.
- When you have both Cloud and On-Premise Appliance, you can’t delete a group once it is created. You should rename the group to make it clear it should not be used, or add Z to the start of the name so it will show at the bottom of the list.
Go to Services > Authentication > Directories to check what directories you are syncing. If you don’t see the directory here, create a Directory.
Add new User Groups
- Go to Services > Authentication > Groups.
- Select Add new group.
- Add a name for the group and a comment if needed.
- Select Add.
Edit or Delete User Groups
You cannot delete or edit the Unauthenticated IPs, Default Users or Banned Users groups. If you try to edit one of these groups, you’ll see an error banner and will need to edit the name back to the original name, or cancel the edit.
To edit a User Group:
- Hover over the relevant group.
- Select Edit to adjust the configuration.
- Select Save changes.
To delete a User Group:
- Hover over the relevant group.
- Select Delete.
Add or remove users from the User Group
You can only change users within Directory groups in your Directory Service provider.
To add a new Directory group to User Group mapping:
- Go to Services > Authentication > Directories.
- Select the directory name to expand the relevant directory.
- In the Group mappings section, select Add new group mapping.
- In the Directory group list, select the groups to map from.
- Select a Local group (User Group) to map your Directory groups to.
- Make sure the Enabled checkbox is selected.
- Select Add.
To edit or delete a group mapping:
- Go to Services > Authentication > Directories.
- Select the directory name to expand the relevant directory.
- In the Group mappings section, select Edit or Delete.
Cloud
Go to Admin Panel > Directories to check what directories you are syncing. If you don’t see the directory here, set up a new directory.
Add new User Groups
- Go to Admin Panel > Smoothwall Groups.
- Select the Tenant if you have multiple Tenants.
- Select the Add Smoothwall Group button.
Important
If you cannot select the Add Smoothwall Group button because it is greyed out, please contact Smoothwall Support.
- Add a name for the group and a comment if needed.
- Scroll or type into the search to find Directory groups.
- Check the checkboxes to add the Directory Groups to your Smoothwall Group.
- Select Save.
- Go to Filter > Publishing and select Publish.
Delete a User Group
You can’t delete a group once it is created because your groups can be used elsewhere, and deleting the group can cause issues with other Smoothwall services.
You should rename the group to make it clear it should not be used, or add Z to the start of the name so it will show at the bottom of the list.
- Select the group and select Edit Smoothwall Group.
- Change the name and select Save.
Add or remove users from the User Group
You can only change users within Directory groups in your Directory Service provider.
- Select the group and select Edit Smoothwall Group.
- Select or deselect the Directory groups as needed.
- Select Save.
- Go to Filter > Publishing and select Publish.