Reflection for Secure IT Server for Windows > Working with Subconfigurations > Configure Group-Specific Settings > Inheritance Rules for Group Subconfigurations

Inheritance Rules for Group Subconfigurations

Review the following information to understand how the server applies settings when a user belongs to more than one group for which you have defined a subconfiguration.

Applying settings from the first applicable group only

By default the server applies settings for only one group subconfiguration to any given user. If a user belongs to more than one group listed in the Group Configuration Pane, the server applies the settings of the highest priority group. A group configuration higher in the list has priority over any group configuration lower in the list. You can use the Move Up and Move Down buttons to adjust the order of the list.

Applying settings from all applicable groups

The Group Configuration Pane includes an option to Use all applicable groups. This option applies only to group settings configured using the SFTP Directories and Mapped Drives panes. When this option is selected, the SFTP accessible directories or mapped drives available to a user are determined using the following rules:

  1. A group configuration higher in the list has priority over any group configuration lower in the list.

  2. All directories and drives are inherited from configurations for all groups to which the user belongs except as described in these rules.

  3. If the user belongs to a group whose configuration has Inherit directories or Inherit drives unselected, then directories or drives are not inherited from any lower-priority group configurations, from any client host configurations, or the global configuration.

  4. If the subconfigurations that apply to a user include more than one directory with the same virtual name, or more than one drive mapped to the same drive letter, the highest priority setting is used, including any applicable credential settings.

    NOTE:To make it easier to track how your group subconfigurations will be applied, use unique names for all virtual directories.

  5. If two virtual directories or mapped drives are mapped to a physical directory on the same remote server but with different credentials, only one set of credentials is used. This behavior is the same as if this situation occurs within a single configuration. For details, see Best Practices for Using Cached Credentials.

  6. The server uses the setting for User login directory specified in the highest-priority group that for which you have configured a non-inherited value for this setting.