The Cornell Groups Management infrastructure provides a way for Cornell IT administrators and others to manage authorization to network resources via CornellAD Groups.

Groups can be used

• with CUWebAuth to allow only members of a specific group to access websites
• to delegate permission for CornellAD resources such as printers and file-sharing resources
• to set permissions in Exchange. For example, to share an Exchange calendar with a specific group.

CornellAD administrators can securely manage Active Directory with Quest Active Roles Server.