This guide explains how to create a manual group in eADM using the group creation wizard. It is intended for administrators who need to set up a new group, for example a mailing list or a security group, that is not generated automatically from the organisational structure.
The wizard can be found at Users & organisation > Groups → Wizard for creating manual group.
Step 1: Synchronization Template
Select which synchronization template to use for syncing the new group to target systems:
-
Synchronization template: Suitable for most setups. Choose a template from the dropdown, for example
AD: Importerte grupperto create a new AD group. The panel on the right shows the template's Name, Description, and linked Ruleset, so the correct template can be confirmed before continuing. -
Parent: An alternative option for custom setups that do not fit a standard synchronization template.
Custom setups may require other values in the Parent attribute, as well as optional fields added in step 3.
Select Next to continue.
Step 2: General
Enter the group's identifying details:
|
Field |
Description |
|---|---|
|
Name |
The group name. |
|
SourceId |
Must be unique and immutable. The Use name as source id checkbox is enabled by default. For groups that already exist in the target system, use the |
|
Description |
Optional free-text description of the group. |
Select Next to continue.
Step 3: Optional Fields
Add any optional synchronization fields the group requires, using the Add synchronization Field dropdown. Check the selected synchronization template's description panel for hints on required and useful attributes and values, for example target-system fields such as extensionAttribute2 or extensionAttribute3.
Note: extensionAttribute2 is typically used for parent OU path in AD in this format “OU=Groups,DC=Contoso,DC=com”
Select Next to continue.
Step 4: Members
This step sets a MemberRuleSetId, which links a rule set directly to the group for backwards compatibility.
Identum strongly recommends skipping this step. Add members through access management instead, for added flexibility and more powerful functionality. See How to create a rule for direct group membership for details on the direct membership approach and its limitations.
Leave MemberRuleSetId as None selected unless there is a specific reason to use direct membership, and select Next to continue.
Step 5: Summary
Review the completed group definition before saving:
-
The selected Synchronization template panel, showing its name, description, and ruleset.
-
A table listing each Synchronization Field, its Value, and any Derived value calculated from that value.
Confirm all values are correct, then select Save to create the group. The group will be created on the next sync cycle.
Related articles