How to Use Agent Groups in TechIDManager for Granular Rights Management
In TechIDManager, rights are assigned by connecting three core elements together:
- Agents and Agent Groups
- Techs and Tech Groups
- Rights and Right Groups
These are then linked through triplets, which define who can access what and where.
By default, every new agent automatically joins the All Domains agent group. This ensures baseline access, but as your environment becomes more complex, you’ll likely want to assign agents to additional groups for more granular rights management.
Options for Adding Agents to Groups
You have two main options to add an agent into additional groups:
- Through the Portal
- Navigate to the Agent in the TechIDManager portal and add the Agent to one or more AgentGroup(s).
- Navigate to the AgentGroup in the TechIDManager portal and one or more Agent(s) to the AgentGroup.
- Through the Command Line at Installation
- Use the “agentgroup” command line parameter when installing the agent, or at anytime after the agent is running.
- This automatically assigns the agent to the specified group when it next checks in with the Portal.
Using the AgentGroup Command Line
The “agentgroup” command line provides flexibility to automatically assign agents during installation—or even years later-to an already existing group. If you run the command again, the agent will update its group membership on the next check-in (changes occur once per hour).
Example: Adding an Agent to the “Level One Domains” Group
|
1
|
Identify the target group in your portal (in this case, Level One Domains). | |||
|
2
|
During installation, include the following in your script: TechIDAgent.exe agentgroup "Level One Domains"
|
|||
|
3
|
Once installed, the agent will automatically join both: | |||
|
||||
|
4
|
To verify, run: TechIDAgent.exe show |
|||
This will display the agent’s group memberships, including Level One Domains.
Key Notes
- All agents join All Domains automatically.
- You can use the “agentgroup” command line during installation or post-installation.
- Group membership updates are processed once per hour.
- Assigning agents to the right groups allows for more precise control over rights in TechIDManager.
Support
For additional documentation, examples, or troubleshooting, refer to the TechIDManager knowledge base or contact our team at support@techidmanager.com
