How to work with groups

• Microsoft Entra groups

  • Users' membership of groups is maintained in Microsoft Azure (portal.azure.com)

  • Computers that are registered with Microsoft Entra ID can have their membership of (device) groups maintained in Microsoft Endpoint Manager admin center (endpoint.microsoft.com) or Microsoft Azure. See also: Microsoft documentation on: Add groups to organize users and devices

    • Computer groups are used only in connection with Home office and print queue properties Add print queue automatically and Set as default printer.

    • Groups are synchronized automatically at approximately 20 minute intervals. Only changes are synchronized.

    • Nested groups are not supported.

    • Enable dynamic memberships to manage memberships through the rules you specify.

    • See the Microsoft Entra ID documentation.

• Google groups

  • Users' membership of groups is maintained in your Google Admin console (admin.google.com).

  • Groups are synchronized automatically at approximately 20 minute intervals. Only changes are synchronized.

  • Nested groups are not supported.

  • Computer groups are not supported.

  • See the Google Workspace Administrator Help.

• Print queues

  • Print queue/group membership is maintained in Printix Administrator by adding groups to print queues.

  • A print queue that has Exclusive access selected for one or more groups can be accessed ONLY by the users in any of those groups.

  • A print queue that does not have Exclusive access selected for any group can be accessed by all users.

  • Printing to a print queue without access will result in a message such as: Print to BNM is not allowed.

  • A print queue that has Add print queue automatically will be added automatically to the computer when a user in any of those groups signs in.

  • A print queue that has Set as default printer selected will become the default printer for the users and computers in the group.

  • A print queue can be Exempt from secure print.

Access to print queues is obviously also subjected to restrictions imposed by networks .

Shows how access to print queues within a network can be controlled for five users, four print queues (ASD, BNM, CVB, and DFG) and three groups (G1, G2 and G3).

• Jane (member of the groups G1 and G2) is allowed to use print queue: ASD, BNM, CVB, and DFG.

• Paul (member of the group G1) is allowed to use print queue: ASD, BNM, and DFG.

• Mary (member of the groups G2 and G3) is allowed to use print queue: ASD, CVB, and DFG.

  If Mary attempts to print to the BNM print queue, she will see the message: Print to BNM is not allowed.

• John (member of the group G3) can use print queue: DFG.

• Bob (not a member of any group) can use print queue: DFG.

	ASD	BNM	CVB	DFG
Jane	+	+	+	+
Paul	+	+	–	+
Mary	+	–	+	+
John	–	–	–	+
Bob	–	–	–	+

Printix Client can be configured with useGroupPermissions to set security privileges on print queues. Exclusive access groups on print queues will now limit the security privileges accordingly, and only users being members of the Exclusive access groups will be able to see and print to the restricted print queues. Otherwise, all installed print queues is made available to the signed in user.