Directory Services › Create Group Operator › Input Parameters

Input Parameters

Group Path

Specifies the distinguished name of the object under which you want to create the new group object.

Group Name

Specifies the name of the group you want to create. This is the CN attribute of the group.

LDAP Group Type

Specifies the type of LDAP group. Select either group, group of names, or group of unique names.

Use the specified array field for the Group Members

When checked, then the array of members is used for this request.

LDAP Group Members Array

Specifies the array of members of the group (required for Group of Names or Group of Unique Names in Active Directory). This field is enabled only when the Use the specified array field for the Group Members field is checked.

LDAP Group Members

Specifies the members of the group (required for Group of Names or Group of Unique Names in Active Directory). This field is enabled only when the Use the specified array field for the Group Members field is unchecked.

Creating an object of type 'Group' in Active Directory?

Check if we are creating an object of type 'Group', as specified in the LDAP Group Type, in an Active Directory server. For an object "Group" in Active Directory, we can set two extra attributes: Group Scope and Group Type.

Active Directory Group Scope

Specifies the scope of the group that is created in an Active Directory. Select either Domain Local, Global, or Universal. This field is enabled only when you select the Creating an object of type 'Group' in Active Directory? check box.

Active Directory Group Type

Specifies the type of the group that is created in an Active Directory. Select either Security or Distribution. This field is enabled only when the Creating an object of type 'Group' in Active Directory? field is checked.

Notes

• The Active Directory does not allow for a group of Universal scope to be of type Security. The operation fails in this case.
• The values that are specified in the Active Directory Group Scope and Active Directory Group Type fields are ignored when the LDAP Group Type field is not set to the value "Group".
• AD Group Scope and AD Group Type fields are not ignored when LDAP Group Type is not set to value "Group". Those fields are activated when you select the check box Creating an object of type Group in AD (because there is no way to perform multiple selections in CA Process Automation). The important thing is that the values of these fields are only relevant when you create a "Group" in Active Directory. In the UI, they might still be active but, in the back end, they are ignored in all other cases.