Syncing Active Directory Groups to the Directory

When a group distinguished name is mapped from your enterprise directory to the VMware Identity Manager directory, the group names are added to the directory. The group members are not synced to the directory.

The Groups page in the VMware Identity Manager console displays the group names that are synced. The Users in Group column shows the number of members that have been synced. If members are not yet synced, the Users in Group column displays Not Synced.

Group members are synced to the directory when the group is entitled to an application in the Catalog or when the group is added to a rule in an access policy in VMware Identity Manager. You can also manually sync users that are members of the group from the Groups> Users page.