A security group is comprised of one or more 25Live users with the same set of functional security, assignment policy, and object security permissions.

25Live comes with two default security groups, System Administrators (-1) and Default Users (-2). The System Administrators group has full rights to all system functions and objects. You can’t change the functional or object rights of this security group, but you can add and change its members. The Default Users group typically becomes the default group for LDAP or Shibboleth authentication.

The 25Live Administration utility comes with several security group “templates” that each have functional security settings most common to a particular group of users. The templates reflect best security practices, and are to be used as guides in setting up your security groups. You may, however, have more or fewer security groups depending on your needs, and the functional access settings of each can be different than the recommendations reflected in each template.