Viewing the roles and users assigned to an internal user group

To view the roles and user accounts assigned to an internal user group, use the Edit User Group view of the User Groups page.

The following table describes the fields in the Edit User Group view.

Field	Description
Name	The name of the user group. You can edit the text in this field.
Description	A brief description of the user group. You can edit the text in this field.
Available Roles
Name	The name of a role that is not assigned to the group. Note You can sort and filter the list on this field. Filtering is case-sensitive, and it does not match wild card characters.
Description	A brief description of the role. Note You can sort and filter the list on this field. Filtering is case-sensitive, and it does not match wild card characters.
Access	To add a role to the group, click Grant in this column. The role name moves to the Assigned Roles list to the right.
Assigned Roles
Name	The name of a role that is assigned to the group. Note You can sort and filter the list on this field. Filtering is case-sensitive, and it does not match wild card characters.
Description	A brief description of the role. Note You can sort and filter the list on this field. Filtering is case-sensitive, and it does not match wild card characters.
Access	To remove a role from the group, click Remove in this column. The role name moves to the Available Roles list to the left.
Available Users
Email	The email address of a primary or external user that is not assigned to the group. Note You can sort and filter the list on this field. Filtering is case-sensitive, and it does not match wild card characters.
Type	(Read‑only) Primary organization of the user account: Internal―The user account is defined in this IAM organization External―The user account is defined in an external IAM organization.
Access	To add a user to the group, click Grant in this column. The group name moves to the Assigned Users list to the right.
Assigned Users
Email	The email address of a primary or external user that is assigned to the group. Note You can sort and filter the list on this field. Filtering is case-sensitive, and it does not match wild card characters.
Type	(Read‑only) Primary organization of the user account: Internal―The user account is defined in this IAM organization External―The user account is defined in an external IAM organization.
User Type	(External groups only) Select the user's membership type in this group: User―Has read-only privileges on the user group. Owner―Has read-only privileges and receives notifications about changes made to the group Note An external group must have one or more owners.
Access	To remove a user from the group, click Remove in this column. The group name moves to the Available Users list to the left.

Prerequisites

IAM Admin access to the Trellix IAM Web UI.

To view the roles and user accounts assigned to a user group:

Log in to the Trellix IAM Web UI.
Select Organization Settings > User Groups.
The User Groups page lists all Trellix IAM user groups known to your IAM organization.
The Internal User Groups panel lists user groups that are defined in your organization. The External User Groups panel lists user groups that are defined in other organizations but which Trellix has added to your organization.
(Optional) Sort and filter either of the lists on the Name field.
Note
Filtering is case-sensitive, and it does not match wild card characters.
Select the role you want to view. Use either of the following methods:
- Click the role name in the first column.
- Click the Options icon and select View/Edit.
The Edit User Group view appears, and the Assigned Roles panel lists the roles assigned directly to the user group.
Note
The entitlements assigned to a global role are specific to the product for which the role grants user access. Custom roles can have entitlements for one or more products.