To maintain a larger set of local users, you must group the users and reference the service configuration to which the group of users should be granted access.

To grant access to an OpenVPN endpoint that is dedicated for use by the sales department to the alice and bob local service users, both of whom work in the sales department, use the following commands:

vyatta@vyatta# set resources service-users local group sales-dep

vyatta@vyatta# set resources service-users local user alice group sales-dep

vyatta@vyatta# set resources service-users local user bob group sales-dep

To grant the sales-dep group access to the OpenVPN vtun1 interface, use the following command:

vyatta@vyatta# set interfaces openvpn vtun1 auth local group sales-dep