You may want to share some resources between departments in case of future changes or faults while maintaining the segregation of resources for each department.
In such cases, configuration can be performed simply by creating user groups and sharing roles.
A user group is a function for the batch management of multiple users. By setting a role and access scope for a user group in the same way as for a user, you can set the privileges for all the users that belong to that user group.
Perform the following settings to share resources without combining them:
Create a user group and resource folder for each department
Create a resource pool to be shared among departments
Set the access scope for the user groups corresponding to each department, to the department dedicated resource folder and the shared resource pool
Note that, by default, only the "admin" user group is defined. If you do not specify a user group when creating a user, that user will belong to the "admin" user group.
Since a role and access scope is not set for the "admin" user group, only the roles and access scopes set for the users inside the group are enabled. Therefore, if resources are only being used within a department, there is no need to pay attention to user groups.
For details on roles and user groups, refer to "Appendix C Roles and User Groups".