Define the columns of the Members table in the Properties web action. Specify the LDAP property names. 

The default set of columns is defined in the Default columns for AD Groups 'Members' query setting of Active Directory extension settings.

More Options

For the information about these settings, please refer to the More Options description in the New User web action.

Specify if secondary owners should be displayed for all groups or for distribution lists only.

Specify the groups for which membership changes are allowed: Any group listed on the form or Only from groups located in the Admin Unit scope and Additional scopes.

If you have a set of AD groups that are managed centrally and you do not want to delegate Admin Unit administrators permission to remove accounts from these groups, set this setting to Only from groups located in the Admin Unit scope and Additional scopes. You might also need to set the Additional Scopes setting on the AD Users web query .

Specify the way how to enumerate group members and its properties:

• Search managed and trusted domains (default)

• Search managed domains, do not search trusted domains

• Get members Name and Parent OU from Member property of the group (legacy)

For details, please see the description of Create Active Directory object cache setting in Active Directory extension settings. 

Limit the maximum membership for display name resolution, otherwise, it could affect the performance.

You could set group name prefix for all created groups. 

Character Restrictions

Select whether prohibited or allowed the symbols specified in settings below.

The default value is Prohibited.

Enter prohibited symbols without spaces or if using the Allowable option, enter a regular expression enclosed in single quote marks.

NOTE: By default, the prohibited symbols are '@' and '–'.

If you use Active Directory extension attributes to store additional information for groups, you could select these attributes and map them to Other Attributes.

To set labels or default values for these attributes, please use Attribute policies .

NOTE: Multi-valued attributes are not supported in Other Attributes.