internal user db - missing groups function

Installation
1

Hi everybody,
new user here.
We just installed 3.11.3 from packages on Ubuntu. So far impressed. I created a resolver with the CLI: pi-manage config resolver create_internal MYSQL.
It did add a table to my pi MYSQL instance and all is working. What I need now is the ability to group users. I dont see this option with my current setup. Ideally I would like a ways to achieve this (with MYSQL or by some other means). We start from nothing - we do not need to integrate with an existing user repository. Group member ship to be used to grant access to NAS agents.

Thanks for your time.

2

There is no “group” functionality by intended design.

Users can have attributes (which can in fact be a group membership) and you can design policies and behaviour based on user attributes. (In your wording based on groups).

The API of privacyIDEA can return user attributes and you can map these attributes to RADIUS Attribute Value Pairs.

See 8.4. Authorization policies — privacyIDEA 3.11.3 documentation

And FreeRADIUS/rlm_perl.ini at master · privacyidea/FreeRADIUS · GitHub