Enable provisioning of Active
Directory groups
Active
Directory
groupsIn the
BlackBerry UEM Cloud
management console, you can enable provisioning of Microsoft Active
Directory
groups to allow BlackBerry Workspaces
to use company directory connections that are configured in UEM
(for example, Azure
Active
Directory
and Active
Directory
through the BlackBerry Connectivity Node
).When you enable the provisioning of
Active
Directory
groups:
- In theWorkspacesadministration console, Organization Administrators can grant permissions toWorkspacestoActive Directorysecurity groups.
- Workspacesusers with sender permissions can use the Send a copy feature to send files toActive Directorydistribution lists.
- In theUEMmanagement console, administrators can assign roles to users according to theActive Directorygroup they belong to. For each group that you add, you choose the roles that you want to automatically assign to its members. When a user creates aBlackBerry Workspacesaccount using an email address in your organization's directory, the account is automatically assigned the appropriate role based on the group that they are a member of.
In
BlackBerry UEM Cloud
management console, add a company directory connection to an Azure
Active
Directory
, or install the BlackBerry Connectivity Node
and configure it to work with Microsoft Active
Directory
.- In theBlackBerry UEM Cloudmanagement console, clickSettings>BlackBerry Workspaces.
- ClickRoles by Active Directory.
- SelectEnable provisioning of AD users and groups.
- ClickApply changes.