Importing User Groups

User groups can be imported by domain and by organizational unit. This makes importing user groups into M-Files quicker and easier. M-Files can check for new and deleted user group members periodically.

Steps

Open M-Files Admin.
In the left-side tree view, expand the desired connection to M-Files Server.
In the left-side tree view, expand the document vault of your choice.
Still in the left-side tree view, highlight User Groups and then click Import User Group... on the task area.
The Import User Group dialog is opened.
Using the Domain drop-down menu, select the domain from which you want to import user groups.
Using the User group drop-down menu, select the user group that you want to import.
The list area in the Import User Group dialog is populated with the members of the selected user group.
Optional: Check the Include users from nested groups option check box if you want to import the users from any nested user groups as well.
Using the License type for new login accounts drop-down menu, select the license type for the login accounts of the users to be imported.
For more information about license types, see License type.
Optional: Check the Check for new and deleted members every 15 minutes option check box if you want to keep the user group up to date and import new users automatically when they are added to the group.
Click OK to import the selected user group.

Results

The selected user group is imported to the selected vault and it is added to the User Groups list.

Defining, Editing or Disabling Import Settings of Existing User Groups

You can also import users to existing user groups in M-Files.

Or you can edit the synchronization settings of previously imported user groups. If the user group on the domain is changed (it is for instance renamed or the grouping is changed), the earlier imported M-Files user group can be merged with the new user group on the domain. This preserves the identity of the M-Files user group regardless of changes in the domain user group, and the permissions related to it can remain the same.

if you no longer wish to import users to a specific user group, you can also disable user group synchronization altogether.

Steps

Open M-Files Admin.
In the left-side tree view, expand the desired connection to M-Files Server.
In the left-side tree view, expand the document vault of your choice.
Still in the left-side tree view, highlight User Groups and then, on the User Groups list, double-click a user group that you want to edit.
The User Group Properties dialog is opened.

Either:

If you want to	Do the following
Import to users an existing user group	Check the Group members are synchronized from the domain option check box, click the Define... button and then define the import settings in the dialog that is opened. See Importing User Groups for specific instructions on import settings. After you are done, click OK.
Edit the import settings of a previously imported user group	Click Define... and modify the settings in the dialog that is opened. See Importing User Groups for specific instructions on import settings. After you are done, click OK.
Disable user group synchronization for a user group	Uncheck the Group members are synchronized from the domain option check box.

Click OK to save your changes and close the User Group Properties dialog.

Users in Synchronized Active Directory Groups

When new users are added to Active Directory (AD) groups that are synchronized to M-Files:

The users are added as vault users to the vault in which the user group is located.
If the added users do not yet have M-Files login accounts, new login accounts are automatically created for the users and the license specified in the synchronization settings is applied to the new login accounts.
No changes are made to existing M-Files login accounts. If users have been assigned concurrent licenses, and they are added to a group for which named licenses are specified, the users retain their concurrent licenses.

When users are removed from AD groups that are synchronized to M-Files:

The users are removed from the user group in M-Files, losing all permissions that were granted to them through the group membership.
No other changes are made. The users retain their access to the document vault and their login accounts remain active, keeping the licenses assigned to them.