Active Directory users are added when the user profiles are synced from Active Directory to the Workspace ONE Access directory.
Because users that are members of a group are not synced to the directory until the group is entitled to an application or the group name is added to an access policy rule, add all users who need to access the Workspace ONE Access service when you initially select the users to sync.
Prerequisites
Active Directory attributes mapped to user attributes in the Settings > Users Attributes page. See the Directory Integration with Workspace ONE Access publication for more information about integrating Active Directory with Workspace ONE Access.