|
|
|
In Active Directory, a universal group can contain members from any domain within an Active Directory forest. In CA Identity Manager, a universal group account template is a type of Active Directory account template which includes some universal group membership definitions.
You can assign a Universal Group account template to a provisioning role. Any accounts with this account template are granted the memberships specified in the universal group template, regardless of the user’s Active Directory domain.
In previous releases of CA Identity Manager, assigning a universal group template could cause accounts to be created unexpectedly in the Active Directory domain that hosted the group. Now, the Universal Group Only setting on the Account Template tab prevents these unnecessary accounts from being created.
| Copyright © 2012 CA. All rights reserved. | Tell Technical Publications how we can improve this information |