Domain Filtering for User Groups

All LMS user groups belong to a logical domain. By default, new user groups are assigned to the logical domain of the administrator creating the user group. 

Administrators with visibility across multiple domains can update a user group's domain by editing the user group.

Domain Filtering Rules

Object X can see object Y if any of the following conditions are true:

• X is a cross-domain administrator
• X is in the Global Default domain
• X is in a domain with the Remove access restriction on other client domain user records option enabled
• X and Y are in the same domain

This domain filtering logic is used to determine:

• Whether the logged-in user (X) can see another user (Y)
• Whether the logged-in user (X) can see an organization (Y)
• Whether the logged-in user (X) can use a user group (Y)
• Whether a user group (X) can have a candidate user (Y) as a member

Whether a logged-in user can assign a candidate user to a user group depends on the following factors:

• The domain of the logged-in user
• The domain of the user group
• The domain of the candidate user
• Whether the logged-in user has write permission to the user group
• Whether the logged-in user is a cross-domain administrator

About User Groups

About Logical Domains