Import User Groups

The Import User Groups feature allows you to import user groups to M-Files. To open the dialog, select the User Groups section under your document vault in the tree-view of M-Files Admin and click Import User Group...

User groups can be imported by domain and by organizational unit. This makes importing user groups into M-Files quicker and easier. M-Files can check for new and deleted user group members periodically.

Importing user groups by domain and organizational unit

Select the user group by domain and organizational unit. Also select a license type for the new login accounts. For more information about licenses, refer to License type under New Login Account.

You can use the Include users from nested groups option to control whether you want to also import subgroups of the selected user group.

You can also have M-Files check for new and deleted members of the group every 15 minutes. Otherwise, M-Files checks for changes with the Refresh Now action found in an imported domain user group's context menu.

Importing a user group from a changed domain user group

The imported domain user group can also be disabled or edited.

For example, if the domain user group changes (it is for instance renamed or the grouping is changed), the earlier M-Files user group can be merged with the new domain user group. This preserves the identity of the M-Files user group regardless of changes in the domain user group, and the permissions related to it can remain the same.

In the properties of the user group, enable Group members are synchronized from the domain and click Define.... Then edit the information for the user group to be imported.

Users in synchronized Active Directory groups

When new users are added to Active Directory (AD) groups that are synchronized to M-Files:

The users are added as vault users to the vault in which the user group is located.
If the added users do not yet have M-Files login accounts, new login accounts are automatically created for the users and the license specified in the synchronization settings is applied to the new login accounts.
No changes are made to existing M-Files login accounts. If users have been assigned concurrent licenses, and they are added to a group for which named licenses are specified, the users retain their concurrent licenses.

When users are removed from AD groups that are synchronized to M-Files:

The users are removed from the user group in M-Files, losing all permissions that were granted to them through the group membership.
No other changes are made. The users retain their access to the document vault and their login accounts remain active, keeping the licenses assigned to them.