Users and groups（用户与组）

Users

Access to Foundry is managed via one or more identity providers, which give Foundry the ability to validate users as they log in. Identity providers also supply information on users, their attributes, and groups. Foundry can integrate seamlessly with your existing identity provider, allowing full end-to-end access administration and management through your existing system. See Authentication and Organization Assignment to learn more about configuring authentication via Control Panel.

A user is an authenticated individual with access to Foundry. A user is typically defined by an external identity provider (e.g. an Active Directory system). A user has attributes which is public, structured information about the user.

Learn more about managing users.

Groups

A group is a set of users. Groups make it easier to manage security groups and customize the Foundry user experience for multiple users at a time. Access to Projects and resources are usually granted to groups rather than individual users. The Securing a data foundation documentation highlights how groups are used to manage permissions.

A group is typically defined by an external identity provider (for example, a customer Active Directory system) and applied throughout the Foundry platform.

Learn more about managing groups.

---

中文翻译

用户与组

用户

对 Foundry 的访问权限通过一个或多个身份提供者(identity provider)进行管理，这些提供者使 Foundry 能够在用户登录时验证其身份。身份提供者还提供用户信息、用户属性及用户组信息。Foundry 可与您现有的身份提供者无缝集成，从而通过现有系统实现完整的端到端访问管理与控制。请参阅身份验证与组织分配，了解如何通过控制面板配置身份验证。

用户(user)是指经过身份验证、拥有 Foundry 访问权限的个人。用户通常由外部身份提供者（例如 Active Directory 系统）定义。每个用户都拥有属性(attributes)，即关于该用户的公开结构化信息。

了解更多关于管理用户的信息。

组

组(group)是一组用户的集合。组可以简化安全组管理，并同时为多个用户定制 Foundry 使用体验。项目和资源的访问权限通常授予组而非单个用户。保护数据基础文档详细说明了如何使用组来管理权限。

组通常由外部身份提供者（例如客户 Active Directory 系统）定义，并应用于整个 Foundry 平台。

了解更多关于管理组的信息。