You can have groups on NetScaler Gateway that are local groups and can authenticate users with local authentication. If you are using external servers for authentication, groups on NetScaler Gateway are configured to match groups configured on authentication servers in the internal network. When a user logs on and is authenticated, if a group name matches a group on an authentication server, the user inherits the settings for the group on NetScaler Gateway.
After you configure groups, you can apply authorization and session policies, create bookmarks, specify applications, and specify the IP address of file shares and servers to which the user has access.
If you are using local authentication, create users and add them to groups that are configured on NetScaler Gateway. The users then inherit the settings for that group.
Important: If users are a member of an Active Directory group, the name of the group on NetScaler Gateway must be the same as the Active Directory group.