Group object

Defines attributes for managing Trust Protection Platform groups.

Client Group Settings provide a way to logically group discovered machines and automate work to be done on them. Work might include key and certificate discovery, certificate installation, or device placement. Grouping devices also lets you more easily delegate groups to other administrators to coordinate and complete various types of work.

Group attributes

Attribute

Description

Assets

UI: NA
Required: No

Policy Definable: No. Default: NA

The Distinguished Names (DNs) of any assets which should be exclusively owned by a team. For example, a Policy folder or an object.

Foreign Security Principal

UI: NA
Required: No

Policy Definable: No. Default: NA

This is a non-local user or group that is a member of the team. The format is a Prefixed Universal.

Full Name

UI: Full Name
Required: No

Policy Definable: No. Default: NA

Used internally to indicate the Trust Protection Platform distinguished name of the identity object for local accounts and the identity provider specific distinguished name for non-local accounts.

Group Membership

UI: Members
Required: No

Policy Definable: No. Default: NA

The DN of a Group object. Multiple instances of this attribute indicate membership is in more than one group. If a child group is removed from this group Trust Protection Platform deletes this attribute and the corresponding Member attribute of the Group object.

Member

UI: NA
Required: No

Policy Definable: Yes. Default: NA

The DN of a User or Group object. Multiple values indicate more than one member is in the group.

Owner

UI: Owners
Required: Yes

Policy Definable: Yes. Default: NA

The owner of a team.

Products

UI: Active Products
Required: No

Policy Definable: No. Default: NA

Based on the Venafi product that is installed. Determines which team layout JSON to use during team creation.

Suggested Member NA

UI: NA
Required: No

Policy Definable: No. Default: NA

The identity of a person or group who was suggested to be a member of a team by a team owner or by another team member.

Team Member Added By Added By

UI: NA
Required: No

Policy Definable: No. Default: NA

The identity of the person who added a member to a team.

Team Member Added On Date Added

UI: NA
Required: No

Policy Definable: No. Default: NA

The date the team member was added to the group.