About Groups Parent topic

Groups are managed in PolicyServer MMC. The following table describes the types of groups available.

PolicyServer Group Types

Group
Description
Top Group
The highest level of groups under the Enterprise. Each Top Group has a unique node underneath the Enterprise.
Subgroup
Groups created within a Top Group. A subgroup inherits the policies of its parent group.
  • Policy inheritance only occurs when a subgroup is created
  • Policy changes to a top level group do not filter down to existing subgroups
  • Subgroup policies cannot be more permissive than the parent groups
Note
Note
Although subgroups inherit all existing policies of the parent group, you must separately add users and devices to the subgroup.
Adding Endpoint Encryption users to a subgroup does not automatically add the users to the Top Group. However, you can add users to both the Top Group and subgroup.