OVERVIEW
This article describes what you need to know about security groups (or reference groups) on SFU Groups and how to request a group.
What is a Security Group?
Security groups (or reference groups) are used for security or access control to services or resources. Security groups contain a list of SFU members and can be synced to multiple services or resources to provide access, assign privileges or provision licensing.
The group manager(s) can then add or remove SFU members as needed, which will then sync to provision (or de-provision) access to connected services or resources.
Here are some examples of security groups that can be used with:
- Joining teams on Microsoft Teams
- Visit restricted websites on Adobe Experience Manager (AEM)
- Access to printers and labs
- Auto-populated Exchange Distribution Groups
Some security groups may be called reference groups if they are managed by departments or staff. This is to distinguish from policy groups (also security groups) which are managed by IT service managers and IT admins.
GROUP REVIEWS
All security groups are required to be periodically reviewed to certify that their membership is accurate, up-to-date and that the group is still needed or in use on SFU Groups. Please note by managing a security group, you'll be responsible for its periodic reviews.
REMINDER
Security Groups can only contain SFU members. If you require an external user to access SFU resources, such as a vendor or contractor, they will need an SFU Sponsored Account.
Who can request a Security Group?
Only staff and faculty may request security groups if needed for a service or resource. For example, if you wish to use a group-managed Teams, it will ask for a reference group (a type of security group).
Requests for security groups are reviewed and created by IT Services or your departmental IT staff.
How to request a Security Group
STEP 1
For academic staff or faculty:
- Contact your department's IT support staff to request a security group.
For administrative staff:
- Contact your IT support staff to request a security group. If you are unsure, contact the IT Service Desk.
STEP 2
Once your security group has been created and you've been given manager permissions, you can find your new security group on SFU Groups under Manage your Groups.
When services or resources are asking for a security group (or reference group), provide the entire group name in blue. For example, ref:dept:its:dept:demo-members is the group name for the security group in the screenshot above.
STEP 3 (OPTIONAL)
You may want to consider automated or auto-populated membership for your security groups. For example, you may want your security group to include members from a particular department, unit, course, academic plan, affiliation, or other system of record information.
This method of membership allows for automatic onboarding or offboarding for anyone who changes roles without manual adjustments on your security groups.
For more information or if you are interested, contact your IT support staff who created the security group on your behalf.
NEED ADDITIONAL SUPPORT?
For questions about Group Management or SFU Groups:
For additional assistance: