Connector Guides › Connectors Guide › Connecting to Endpoints › Microsoft Active Directory Services Connector › Connector-Specific Features › Universal Group Account Templates › Set Up an Account Template that Includes Only Universal Groups

Set Up an Account Template that Includes Only Universal Groups

You can assign a universal-group-only account template to an ADS Provisioning Role which could include:

• One or more normal account-creation-specific ADS account templates for account creation on one or more AD endpoints in the AD forest.
• One or more universal-group-only account templates for universal group membership assignment.

The ADS Provisioning Role gives all the new Active Directory accounts memberships of the universal group, as defined by the universal-group-only account templates.

In this way, you can maintain the normal account-creation-specific account templates and universal-group-only account templates separately.

Follow these steps:

1. Create a universal group account template with all universal group memberships defined.
2. On the Endpoints tab, add all endpoints which have accounts that should be added to the universal groups.
3. On the Groups (Member Of) tab, select Universal Group Only (avoid account creation).
4. Apply the change.