Family Groups rule (AD groups) Overview
Family Groups are a set of Active Directory groups that are created based on the attributes of the Active Directory users or Active Directory computers that will be placed in those groups.
For more details, please see the Configuration of Family Groups article.
Rule Settings
Family and Group settings
| Setting name | Description |
|---|---|
| Create groups | Determines the location within Active Directory, where the new groups will be created. |
| Group name template | The group name template defines the format of the created Active Directory groups names. |
| Existing groups | Specify the action to take when a group with the same name already exists in the managed domain and this group was created not by Family Groups rule. |
| Cleanup empty groups | If set to yes, groups created by this Family that no longer contain any objects with the corresponding group by attribute value will be removed. |
| Advanced Groups Settings | |
| Update groups settings | Specify if all groups settings inside the family should be updated every time the Family Group rule is run or only group membership. |
| Groups scope | Specify the group scope of the created Active Directory groups. |
|
Groups Display Name Groups name pre-Windows 2000 |
Groups Display Name and Groups name pre-Windows 2000 will be set to a group name. |
Groups description |
Specify family groups description. |
Groups notes |
Specify notes for family groups. |
| Groups owner |
Specify family groups owner:
|
| Mail Settings (for Distribution and Mail-enabled Security groups only) | |
|
Groups email prefix Groups email alias |
Specify group's email prefix and alias. By default group name is used. You can use Expression Builder to configure the value. |
| Groups email suffix | Specify the domain suffix for the created groups. |
| Hide from address lists | Specify if created groups should be hidden from address lists. |
| Join group |
Select who is allowed to join the group.
|
| Leave group |
Select who is allowed to leave the group.
|
| Allow external senders | Specify if you want to allow external users to send emails to created groups. |
Membership Rule
Member Queries
| Member Queries | |
| Command |
Select one of the AD Users commands to filter Active Directory users that will be added to the created groups:
|
| Group by properties | |
| Property |
NOTE: Specify the Active Directory user property based on which the groups will be created. You can add up to three properties. Groups
will be created for each value combination.
|
| Create group for null value | Specify if an empty user property will count as one of the possible values and a group will be created containing all users with an empty group by property attribute. |
| Exclude these values | Specify user attributes' unique values that are ignored when creating family groups. Separate values using semicolons. For example, if you list London, a group will not be created for London if the group by property is a city. |
| Value transformation |
Use this setting for these scenarios:
|
| Advanced Settings | |
| Nest hierarchical properties |
Set this setting to No to create a flat list for all values and create a group for each value, and place members in the groups according to the direct relationship between the group by attribute and member. Set this setting to Yes to create a group for each value, but groups are placed as members of other groups if there is a hierarchical relationship between the attributes. For example, Manager A is a manager of Manager B who is a manager of users A, B, C. In this case, two groups will be created, one for Manager A, one for Manager B. Group A will have members: Group B, Manager B. Group B will have members: Users A, B, C. |
Enforce/Schedule
This section defines the schedule for how often to run the rule.
To get more information about this section, please see the Rule Enforce/Schedule section article.
Output
This section defines the output format of this rule.
To get more information about this section, please see the Rule Output section article.
Change History
| Version | Notes |
|---|---|
| 11.2.0 | The AD Computers command has been added. |
| 10.2.0 | The Family Groups have been updated with grouping by multiple attributes. |
| 8.3.0 | The Family Groups are introduced in the product. |
Comments
0 comments
Please sign in to leave a comment.