SFU Groups - Introduction to Group Management

OVERVIEW

This article introduces SFU Groups, explaining their purpose, how they work, and the different types available. It also outlines the key differences between Exchange Distribution Groups and Security Groups, helping users understand how to manage access and permissions effectively.

 

What is a group?

In SFU Groups, groups are used to organize users who have similar roles or responsibilities. Think of a group as a team or a club: when you add users to a group, you can manage their access to resources and privileges all at once, instead of doing it individually for each user.

Since SFU is a large and complex organization, managing groups instead of individual users ensures our resources are organized and secure. It also makes sure that only the right people can access certain resources.

 

Type of Groups

In SFU Groups, there are two types of groups for the standard user: Exchange Distribution Groups and Security Groups.

Exchange Distribution Groups (EDGs, or distribution groups) is a feature of Microsoft Exchange (SFU's email system) that allows a user to send messages to a list of SFU email addresses, or to members of other SFU Groups, all at once.

For more information, visit Request an Exchange Distribution Group.

Security groups (or reference groups) are used for security or access control to services or resources. Security groups contain a list of SFU members and can be synced to multiple services or resources to provide access, assign privileges or provision licensing.

For more information, visit Request a Security Group (Reference Group).

Some security groups may be called reference groups if they are managed by departments or staff. This is to distinguish from policy groups (also security groups) which are managed by IT service managers and IT admins.

 

Comparison Chart

  EXCHANGE DISTRIBUTION GROUP SECURITY GROUP

Alternative name

Distribution Group

Reference Group

Purpose or usage

Email distribution: when you need to email a group of users.

When adding members, they will receive emails when they are sent to the group.

Security or access control: when you need to restrict access to a particular service or resource.

When adding members, they will gain privileges to accessing services or resources linked to the group.

Who can manage Staff, faculty or students (for educational purposes) Staff or faculty (when needed for a service or resource)

Who can be a member

 

Active SFU accounts

Other Exchange Distribution Groups

Reference groups

Note: External emails cannot be added.

Active SFU accounts

Other security groups

 

Note: Some services don't allow sponsored accounts.

Used for

SFU Mail (Outlook / Exchange Online)

Microsoft Teams
SharePoint sites
Adobe Experience Manager (AEM)
Printers and labs
File servers
Auto-populated Exchange Distribution Groups
And more...

Manage your groups

At groups.sfu.ca

At groups.sfu.ca

(IT Admins: grouper.its.sfu.ca)

Create a group

Using a self-serve request form

Contact your departmental IT staff

(IT Admins: grouper.its.sfu.ca)

Delete a group

Request a ticket with Group Management Support Team

Contact your departmental IT staff

Delays on membership change

30 minutes to sync changes

30 minutes to sync changes on Microsoft services (e.g., MS Teams, SharePoint), otherwise minimal delay.

Group review

None

Requires attestation once every 100 days.

A group review (or attestation) refers to the periodic review to certify that their membership is accurate and up-to-date, and that the group is still required or in-use on SFU Groups.

 

NEED ADDITIONAL SUPPORT?

For questions about Group Management or SFU Groups:

For additional assistance: