<html><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /></head><body style='font-size: 10pt; font-family: Verdana,Geneva,sans-serif'> I saw this question come up way back in the archives, so I thought I'd ask to see if there's a better way to do it. Basically I want users who log into my servers that run the FreeIPA client to be given the local usergroup docker. Is there a way to do that? Is it controlled from the FreeIPA server, or is it something (e.g. PolicyKit?) that needs to be run on each client? If it matters, the clients are running Ubuntu 16.04. Thanks! </body></html>