About Groups
Cerberus FTP Server 3.0 added group support. This simplifies administration by letting you assign permissions once to the group instead of multiple times to each individual user. You can add Virtual Directories and basic user settings to a group and have users inherit those permissions. By default, when a user is assigned a group that group's settings override the default user settings. You will see the user settings grayed out and the actual value displayed for each grayed setting is the value of the group that user belongs to.
The exception is the virtual directory list. The user's virtual directories are a union of the group's virtual directories and any virtual directories you add to the user.
Overriding Group settings for a User
You can always over-ride the goup settings by right-clicking on a user in the User Manager and select the "Override Group" to assign a value different from the group value. From that point on that user setting will be "disconnected" from the group setting. You can revert back to the group setting by right-clicking on the user and selecting "Default to Group".
Adding a new group
A single group can be added and modified in the Cerberus FTP Server database by opening up the User Manager and selecting the Groups tab. To add a group, select "New" from the button to the right of the "Cerberus Group Accounts" group box. A new group will appear under the group list box. The newly created group will already be in rename mode, so simply type in the new name of the group. All group names must be unique and are case insensitive. Once you have entered the new group name, press "enter" to commit the change. The group can then be configured by clicking on the group name in the group list box. A list of configurable properties for that group will appear in the list box to the right of the group.
Those properties are:
- Is Anonymous: If checked, the user's password is ignored and the user can be logged in using any password.
- Simultaneous Logins: The maximum number of connections a user of this group can make to the server at the same time.
- Simple Directories: See the section on Virtual Directories for an explanation of this setting
- Group is Disabled: Determines whether the account can login or not. A disabled account cannot login into the server.
- Require Secure Control: If enabled, users that are a member of this group can only login to the server using a secure connection (TLS/SSL encrypted session).
- Requrie Secure Data: If enabled, file transfers will only be allowed for users that are a member of this group if the connection is secure.
