You can create a dynamic group by defining an LDAP filter query using the User Console to dynamically determine group membership at runtime without having to search and add users individually.
For example, if you wanted to generate a group that lists all U.S. employees of NeteAuto, you could define an LDAP search filter similar to the following in the Dynamic Group Query field of the User Console:
You could also modify this query to locate employees outside the United States.
Static, Dynamic, and Nested Groups Example shows an example of a group created by static, dynamic, and nested groups.
You include Dynamic Group Query field in the task by editing the associated profile screen. It is not included by default in the Create Group task.
Note: To enable dynamic groups, system administrators configure support in the directory configuration file (directory.xml):
type can be NESTED, DYNAMIC, or ALL.
GroupTypes is case-sensitive.
To create a dynamic group:
Note: Only an administrator with the Modify Group task can change a group’s dynamic membership.
Copyright © 2015 CA Technologies.
All rights reserved.