Meridian supports Microsoft Active Directory (AD) domain global groups. Active Directory domain local groups and universal groups are not supported. The recommended relationship between a user and the user's permission to perform a particular Meridian action within a folder looks like this:
-
Domain user account assigned to a domain global group.
-
Domain global group assigned to a Meridian application server (domain member server) local group.
-
Meridian application server local group assigned to a Meridian role (in PowerUser) at the vault folder where the action is performed.
-
Meridian role defined (in Configurator) with appropriate Meridian object-level privileges enabled.
