Assign Groups of Active Directory Users to a System Role

If you have established Active Directory user/group schemes, you can leverage that infrastructure when you establish access to your system roles. You can manage your users without the need to duplicate your Windows network directory.

Note: An Active Directory user can be assigned to multiple roles.

You can assign multiple users to a system role either by adding an Active Directory group or via a LDAP (Lightweight Directory Access Protocol) query. LDAP is an Internet protocol that programs use to look up information from a server.

The Groups tab of a system role record contains a list of Active Directory groups and LDAP queries that have already been assigned to the role.