To
control access to a page group, you must have at least one of the
following privileges:You can determine who has access to a page group and to what extent. Keep in mind, however, that page group access works in tandem with the global privileges that are set for users and groups. For example, you may explicitly grant View access on a particular page group to three users using the Access tab. But there may be many more users who can actually view the contents of the page group, depending on how many users have been granted View global privileges on All Page Groups.
To
control access to a page group, you must have at least one of the
following privileges:
Manage All privileges on the page group
Manage All global privileges on All Page Groups
In the Navigator, click Properties next to the page group with which you want to work.
Click the Access tab.
In the Grantee field, enter the name of the user or group that you want to allow to access this page group.
Tip: If you are not sure of
the name of the user or group, click 
(for users) or 
(for groups), and select from the list provided.
In the list, choose a privilege level.
Note: Just because one privilege appears before another in the list does not mean that the privilege implies all other privileges below it. For more information, see Page group privileges.
Click Add.
Tip: If you want to grant a user or group multiple privileges, for example Manage Templates and Manage Style, add the user or group separately for each privilege.
If you change a user or group's page group privileges, your changes may not take effect immediately if that user, or a member of that group has already accessed the page group, and the page group has been cached.
To make sure that your changes take effect immediately, clear any cache entries for the page group by clicking Clear Cache.
Click OK to return to the Navigator.
Use the Privilege
list under Change Access to change a user or group's privilege level.
Or, click 
to remove the user or group's privileges entirely.
Because OID can include multiple containers that can use the same group names, the distinguished name (DN) is displayed next to any group that does not belong to the local Portal instance.