Enable directory-linked groups
You can link groups in
BlackBerry UEM
to groups in your company directory to organize users in UEM
the same way that they are organized in the directory, and to simplify the assignment and management of IT policies, profiles, and apps for users. For more information, see Creating and managing user groups in the Administration content.- Connect to your organization's directory:
- Verify that a company directory synchronization is not in progress. You cannot save the changes you make to the company directory connection until the synchronization is complete.
- In the management console, on the menu bar, clickSettings > External integration > Company directory.
- Click a company directory connection.
- On theSync settingstab, select theEnable directory-linked groupscheck box.
- If you want to force the synchronization of company directory groups, select theForce synchronizationcheck box.If enabled, when a group is removed from the company directory, the links to that group are removed from directory-linked groups and onboarding directory groups. If all of the company directory groups associated with a directory-linked group are removed, the directory-linked group is converted to a local group.
- In theSync limit - percent of users to be off-boarded or removedfield, specify the maximum percentage of users in a group that can be removed or offboarded in a synchronization activity. If this maximum is exceeded,UEMdoes not carry out any removal or offboarding actions on the group during a synchronization. For example, if you specify the limit as 80%, if 81% or more of the users in a group would be removed or offboarded in a synchronization activity,UEMwill not remove or offboard any users from that group. By default, the limit is 100%, which means thatUEMwill not carry out removal or offboarding actions on a group if all of the users that belong to that group are impacted.
- In theSync limit - minimum group size threshold field, specify the minimum number of users that a directory group must contain beforeUEMwill apply the maximum limit that you specified inSync limit - percent of users to be off-boarded or removed. The maximum sync limit percentage does not apply to groups with fewer users than the minimum group size that you specify. The default minimum threshold is 10 (a group must contain at least 10 users forUEMto factor in the maximum sync limit percentage; the maximum synch limit does not apply to groups of 9 or less users). Type 0 if you wantUEMto apply the maximum sync limit to all groups regardless of group size.
- In theMaximum nesting level of directory groupsfield, type the number of nested levels to synchronize for company directory groups.
- ClickSave.
- Optionally, Enable and configure onboarding and offboarding.
- Optionally, configure directory synchronization.
- Create directory-linked groups. For more information, see Creating and managing user groups in the Administration content.