Chapter 06. Groups and Roles
In this chapter, we will explore the following concepts:
Groups
Roles and Domains
Group management
Authorization
In the last chapter, we introduced the concepts of authentication and authorization. For correct authentication each user must be identified uniquely. However, it is very common that multiple users play the same business role in an organization and need similar levels of access. If access is granted to each user separately, it may become difficult to manage the access control due to the following reasons:
1. There are a large number of users and/or resources to be secured.
2. All the users with similar access levels need to be assigned new permissions.
For example, a department may have 100 employees, where all the users need similar access levels to a set of documents. Configuring the same access repeatedly for 100 users is inefficient. Further, if this access needs to be changed (or taken away) for all of these users, it requires the same laborious process...
