Skip to main content

Provision Active Directory groups

Create department-based Active Directory groups, then use them as managed access targets in a NIM role model. Follow the documented setup and validation steps.

Condensed transcriptDirect link to Condensed transcript

This edited text version summarizes the auto-generated captions. Repeated wording and pauses are omitted; it is not a verbatim transcript.

  1. The role tutorial first provisions AD groups corresponding to HR departments. Create a department filter and a calculated group name when the target naming convention differs from the source.

  2. Create include/exclude lookups against existing groups. Feed the missing-group result into a group-creation mapping and test one disposable group. Add the mapping to the provisioning job, evaluate the changes, and run the scheduled process before building role memberships.

Use the related guide for current written instructions. This page inherits its NIM service baseline from that guide; it does not identify the release shown in the recording.