The feature is available for all Splashtop Enterprise teams but is disabled by default. It must be activated through the web console before use.
Table of Contents
- How to enable the feature
- How to manage associates from Grouping
- Export User Permission
- Import SSO user groups using CSV file
How to enable the feature?
- Log into the Splashtop web console at https://my.splashtop.com or https://my.splashtop.eu
-
Click on the Management tab, then Settings
-
Scroll down and find User Configuration > toggle on the option of Allow users to be associated to more than one user group
*If this setting is enabled and users are assigned to different groups, disabling the feature afterward will result in the users being reassigned only to the main group.
If a user is a part of multiple groups:
- They will be considered an "Associate"
-
An end user will be called the "Main user" in their primary group, while the "Associate" refers to any secondary or non-primary group they are a part of
- Access permission behavior, example use case:
If user A is in two groups (Group A & Group B)
[Main user] in Group A
- You can change User A's individual access permission, OR
- You can change Group A's access permission (this only applies if User A is set to "based on group permissions"; otherwise, it follows the individual access permission
[Associate] in Group B
- You cannot change the Associate's individual access permissions, as it is always "based on group permissions." Therefore, you can only modify Group B's access permission.
How to manage associates from Grouping
- Click on the Management tab, then Grouping
- Next to the group you wish to edit, click on the gear icon, then Manage Associates
- The table will display only the users who are eligible to become associates of this group or who are already associates, select the desired users you wish to associate/disassociate with the target group, then click "Save"
The "Current Group" column shows the user's primary group, but users can still be associated with other groups, which will not be displayed. Click the "Manage Associates" button for each group to find out which other groups a user is associated with.
Export User Access Permission
If you wish to know the User Access Permission
- Click on the Management tab, then Users
-
Select the users you wish to export access permission > Click on the Actions button > In the dropdown list click on Export access permission
-
After the export is completed, you will receive an email notification. The results will be displayed as shown below.
Import SSO user groups using CSV file
You can now import your SSO user groups using a CSV file from your IDP!
*This feature works best with AzureAD since it combines SCIM and JIT provisioning.
The data in your file should follow the standard format. Make sure the user list is sorted properly and doesn't mix different types of users, as this could cause errors during processing. Please refer to the screenshot below for the correct layout/format.
To make managing your groups easier, we recommend editing any new user groups imported into the Splashtop console to "User & Computer Group." This way, you can skip the extra step of assigning computer access permissions separately.
Note
- If a user account is associated with multiple groups, their "Current Group" and "Display Name" will reflect the first group listed in the file.