Professional Edition Only
Nearly all aspects of working with SafeHouse at the administrator level involves the concept of groups. You'll frequently see these groups referred to as "branding groups" because groups' properties are embedded, or branded, into the set of SafeHouse files that you distribute to your user base using a customized SafeHouse Setup program.
Throughout this help guide, the terms SafeHouse group, branding group and administrative group all refer to the same thing.
Simply stated, a SafeHouse group represents a set of SafeHouse users who are to be managed as a single administrative unit or domain. The number of users belonging to a specific group really doesn't matter since users are never individually known to the group. Group membership for SafeHouse users is determined by which group's properties were branded into the SafeHouse files installed on their PC.
Although it is possible to deploy SafeHouse without using groups, this is extremely rare in corporate environments since the use of groups is required to support SafeHouse's password reset feature -- something that nobody wants to live without.
People who install SafeHouse using the off-the-shelf setup program downloaded directly from SafeHouseSoftware.com do not belong to a group. Groups only begins to make sense when there is a need to distribute the product to a number of people who share a common set of requirements relating to software configuration and corporate policies.
When deploying SafeHouse within your organization, you always need at least one group. This holds true whether you're deploying SafeHouse to a single department of 5 to 10 people, or to a global enterprise with thousands of employees.
Whether or not you'll need more than one group comes down to a matter of personal choice. Once you understand more about the characteristics of groups, you'll begin to have a better idea if more than one group makes sense in your environment.
Groups are used to represent sets of SafeHouse users with common interests; and most notably, a common administrator. The most-important property for any given group is its administrator password. By allowing each group to have its own unique administrator password, SafeHouse easily supports kingdoms or domains of users which can be separately managed without the managers of these kingdoms from being able to gain access to any information outside of their own areas.
Some companies choose to deploy SafeHouse using only a single group. Others divide employees up by department or geographic territory.
Using more than one group obviously involves a few more things to keep track of. The trade-off usually comes down to the possible need for isolated security zones or boundaries. How important is it to your company to isolate one group of people from another, to administrate from different support centers, or to carve things up into multiple zones to guard against the possibility of an administrator password being compromised?
Click the links below to learn more about SafeHouse groups and to get started with your very first group.