Security Group

A Security Group helps you organise users into groups, such as by department, team, job role, or any other structure that suits your organisation. It can also be used to apply policies and filter dashboard data.

Security Groups can be created manually or imported from Active Directory. A user can belong to one or more Security Groups.

In GuardWare PROTECT, Security Groups control access to protected files. When you protect a file using GuardWare PROTECT, only users in the selected Security Groups can access it. Users who are not members of those groups are automatically restricted. New users who install the PROTECT Agent and sign in successfully are automatically added to the default All Users Security Group.

In GuardWare INSIGHT, Security Groups help you filter and view data for specific sets of users, making it easier to monitor activities and focus on the areas most relevant to users' role. Instead of repeatedly choosing the same individual users, you can select a Security Group to view data for the users you are interested in.

Add a Security Group

1. Log in to the GuardWare Management Console and navigate to Security Groups.
2. You need to set up an Azure Key Vault to create security groups. If Azure Key Vault has not been configured, the Security Groups page displays a Create Key Vault option. Select it to start the setup process. See Set Up Azure Key Vault for instructions.
3. Click +New Security Group. You’ll see an option to create a security group manually or from AD.
4. To create manually:

   1. Select Manually.

      
   2. Security Group Name: Enter a descriptive name for the group that reflects its purpose.
   3. Description: Enter a summary of the group’s role or scope. This helps other administrators understand the intended use.
   4. Encryption Mode: Select how files can be decrypted:

      1. Online: Decryption is allowed only when the user is connected to the network.
      2. Offline: Decryption is allowed even when the user is not connected to the network.
   5. Security Group Type: Select how membership is managed:

      1. Private: Only members and administrators can see the group; it’s hidden from non-members.
      2. Public: Visible to all users, and anyone can see the group.
   6. Click Save.
5. To import from AD:

   1. Select From the AD.

      
   2. Search for the required AD group. Matching Security Groups appear in the SECURITY GROUPS list.
   3. Select the AD group. The selected group appears in the Selected Security Group panel on the right.
   4. Click Save. The group will appear in the Security Group List. You can view the list either by the Group name or by users.

Assign Users to a Security Group

1. Navigate to Security Groups.
2. To assign INSIGHT users:

   1. Search for the security group and click Assign Users > Assign INSIGHT Users in the ACTIONS column.

      
   2. Search and select the users to add, and click Assign Users.

1. To assign PROTECT users:

   1. Search for the security group and click Assign Users > Assign PROTECT Users in the ACTIONS column. You’ll see the list of all users, including AD and external users.

      
   2. Search and select the users to add, and click Assign Users.

   External users appear on the list only after they have accepted the invitation, installed GuardWare PROTECT, and logged in successfully. For details on how to invite external users, see Invite External Users.

Edit a Security Group

1. Navigate to Security Groups and search for the security group to edit.
2. In the ACTIONS column, click the Edit icon.

   
3. Update the required details and click Save.

Delete a Security Group

Deleting a security group immediately removes all assigned users from the group and revokes any permissions granted through it.

For example, when a project is completed and all related files should no longer be accessible, deleting the project’s security group instantly removes access for all members.

To delete a Security Group:

1. Navigate to Security Groups and search for the security group you want to delete.
2. In the ACTIONS column, click Delete.

   
3. Click Delete in the confirmation alert.

The All Users default group cannot be deleted.