Another way to manage your user’s permissions is through Security Groups. 

When running our Discovery tool, itopia CAS gets an inventory of your existing Security Groups configuration and save it in the Catalog section. You can then import the groups from the Catalog with a single click (they will be automatically created in your cloud AD).
​

Best practice is to create Security groups and folder structure with the permissions before moving the data into the folders. 

There are 2 ways of creating a security group in AD. 

2. Or create groups manually clicking on the green + sign in the top right:

​
To delete a group, check the box next to the name and hit the trash icon on the top menu.

Click the number under Users to see who is assigned to the Security Group

Mark the box next to the Group name and select the pencil icon to edit users:

Select users to add them and unselect to remove them from the group.

IMPORTANT: There are some security groups created by the domain automatically. Please don't create security groups with following names since they already exist in AD and could cause a conflict:
​
Access Control Assistance Operators, Account Operators, Administrators, Backup Operators, Cert Publishers, Distributed COM Users, DnsAdmins, Domain Admins, Domain Computers, Domain Controllers, Domain Guests, Domain Users, Enterprise Admins, Enterprise Read-Only Domain Controllers, Event Log Readers, Group Policy Creators Owners, Guests, Network Configuration Operators, Performance Monitor Users, Print Operators, Protected Users, Remote Desktop Users, Remote Management Users, Replicator Schema Admins, Server Operators, Users
​