Avaya IPBS1 Installation And Operation Manual page 81

Note: This step is only applicable if "Use domain group" is selected in the Authorization drop-down
list, see above.
21. Click "OK".
Universal - Can contain users/universal groups/global groups from all domains in the
l
forest. Can PARTLY be used in trusted domains, but maybe makes little sense as only
users/groups of the trusted domain will work in IP-DECT.
Global - Can only contain users/global groups from the same domain. Can be used in
l
trusted domains.
Domain Local - Can contain any users/universal groups/global groups of the forest
l
and domain local groups of the same domain. Can NOT be used in trusted domains.
With the above said, it is recommended to select Global as scope for security group.
Avaya 374x DECT Telephones - User Guide
In the Admin Group RID text field, specify the Relative Identifier (RID) of a Windows
group with administrator rights.
In the Auditor Group RID text field, specify the Relative Identifier (RID) of a Windows
group with auditor rights.
The RID is the last part of the Security Identifier (SID) of a group.
Here is an example of a SID where the last five digits (in bold) are the RID:
S-1-5-21-4151926548-1272113248-3927039109-11265.
To determine the SID of a group, do as follows:
1. Start Windows Command Prompt (cmd.exe). To find Windows Command Prompt,
enter "cmd.exe" in Windows Start Menu search field.
2. In Windows Command Prompt, enter "whoami /groups". This command displays the
group information of the user logged in to the Windows domain.
About security groups in AD
Groups are characterized by their scope and their type (security or distribution).
Using security groups, you can assign user rights to security groups in AD.
The scope of a security group determines the extent to which the security group is
applied within a domain or forest. There are three scopes that can be selected when
creating a security group:
Operation
81
02/2016