Assign an Active Directory group to a system role

1. From a system role, select the Groups tab. The Groups tab contains a list of Active Directory groups and LDAP queries that have been added to the role.

2. On the Groups tab, select Add. The Select the source container screen appears.

3. To add an Active Directory group, mark the Group option and select Browse. The Windows Select Group screen appears.

   For more information about the items on this screen, select the question mark on the screen title bar and drag it over an item.

   Tip: You can display a list of users in the selected group by clicking the Preview button

4. Select the group you want to add to the role and select OK.

5. Mark the Search for users in subcontainers checkbox to include users in any groups within the group you specified. If you unmark the checkbox, the program returns only those users found explicitly within the specified group.

6. When the Overwrite Existing Security Settings box is marked, once synchronized, the saved security settings overwrite the site security and constituent security of the existing users present on that security role. This works for all users that are present in that group. It also adds those users in the Active Directory group with the same security settings which are not linked with the system role before synchronization.

7. Select OK to save the user. You return to the Users tab of the System Role record. The saved Active Directory group now appears in the list on the Groups tab, but none of the users in that Active Directory group appear on the Users tab yet because synchronization has yet to take place with Windows. Once synchronization occurs, users in the Active Directory group appear on the Users tab, with a checkmark in the Synchronized column. For more information, see Synchronize Users in Windows and Blackbaud Groups.