Properties web action (Active Directory groups)

Limit scope to this Domain or OU

This setting is deprecated.

Member properties to display

Specify columns for AD Group members query. You should specify LDAP property names. 

The default set of columns is taken from the Default columns for AD Group members query defined in Active Directory extension > Customize columns section.

More Options

Override Active Directory domains

Show Ticket input field

Show Comment input field

For the information about these settings, please refer to the More Options description in New User web action.

Show secondary owners

Specify if secondary owners should be displayed for all groups or for distribution lists only.

Allow membership changes for these groups

Specify the groups for which membership changes are allowed: Any group listed on the form or Only from groups located in the Admin Unit scope and Additional scopes.

If you have a set of AD groups that are managed centrally and you do not want to delegate Admin Unit administrators permission to remove accounts from these groups, set this setting to Only from groups located in the Admin Unit scope and Additional scopes. You might also need to set the Additional Scopes setting on the AD Users web query, see the AD Users web query for article details.

Enumerate group members and its properties

Specify the way how to enumerate group members and its properties:

1. Search managed and trusted domains (default)
2. Search managed domains, do not search trusted domains
3. Get members Name and Parent OU from Member property of the group (legacy)

Resolve and show member display names (legacy)

For details, please see the description of Create Active Directory object cache setting in Active Directory extension. 

Maximum membership for display name resolution (legacy)

Limit the maximum membership for display name resolution, otherwise, it could affect the performance.

Group name prefix

You could set group name prefix for all created groups. 

Enforce Group name prefix

Character Restrictions

Prohibited or Allowable

Select whether prohibited or allowed the symbols specified in settings below.

The default value is Prohibited.

Symbols in Name 

Symbols in Alias

Symbols in Primary SMTP prefix

Enter prohibited symbols without spaces or if using the Allowable option, enter a regular expression enclosed in single quote marks.

By default, the prohibited symbols are '@' and '–'.

Other Attributes

Other Attribute 1 - Other Attribute 20

If you use Active Directory extension attributes to store additional information for groups, you could select these attributes and map them to Other Attributes.

To set labels or default values for these attributes, please use Attribute Policies.

Virtual Attributes

Virtual Attribute 1 - Virtual Attribute 25

Virtual Attributes allow extending the attribute list for groups in Active Directory without extending the Active Directory schema.

Select the virtual attributes from the list and map them to Virtual Attribute 1 - Virtual Attribute 25.

For more details, please see Configuring Virtual Attributes article.

1. Show secondary owners setting is added.
2. Allow member to be removed from these groups setting is renamed to Allow membership changes for these groups.

Stored Virtual Attributes for Active Directory groups are introduced in the product.

New settings are added:

1. Enumerate group members and its properties
2. Member properties to display

These settings are renamed:

1. Resolve and show member display name (legacy)
2. Maximum membership for Display Name resolution (legacy)