Grant access to groups from another server in macOS Server
If your server connects to your organization’s network account server (also known as a directory server), you can grant group accounts from your organizations network account server access to your server, which allows all group members access.
If people are added to or removed from the network group, the user accounts gain or lose access to services on the server.
If your server isn’t connected to a network account server, connect it to one.
For information, see Connect to a directory server in macOS Server.
If your organization doesn’t have a network account server (other than your server), you can create group accounts.
In the sidebar of the Server app
, select Groups.Click the pop-up menu, then choose the network account server that hosts the group account you want to import.
Groups of the selected network account server appear in the list.
Type part or all of the group name in the search field; when you see the name, select it.
You can also use the “Show only allowed groups” to filter the list of groups you have already allowed access to your server.
Control-click the group, then choose Edit Access to Services.
To apply access to several groups, hold down the Command key while selecting groups, Control-click a selected group, then choose Edit Access to Services.
In the dialog that appears, select the checkboxes for services you want the group to access, then click OK.
In the Groups pane, Group accounts have a label below the group name that shows where the group is actually hosted either locally or from a network account server.