As a blueprint architect for the development business group, you have a blueprint that includes an application machine and a database machine. You want the database machine record added to an organizational unit that is different from the applied Active Directory policy.

You have an existing policy that is applied to the development business group. The policy adds machine records to ou=development,dc=corp,dc=domain,dc=com. You want all database machines to be added to ou=databases,dc=corp,dc=domain,dc=com. In a blueprint that includes a database server, you override the Active Directory organizational unit to add the database machine record to ou=databases,dc=corp,dc=domain,dc=com.

This scenario makes the following assumptions:

  • Your Active Directory includes organizational units for development and databases.

  • You have a test blueprint that is included in a service and the service is entitled.

In addition to this simple example of how you can override the policy, you can use custom properties with Active Directory policy to make other changes to Active Directory when you deploy blueprints. See Working With Active Directory Policies.


  • Verify that you have at last one Active Directory policy. See Create an Active Directory Policy. For example, you create a development policy that adds records to ou=development,dc=corp,dc=domain,dc=com.

  • Verify that you have a business group to which you applied an Active Directory policy. See Create a Business Group. For example, your development business group uses the development policy.


  1. In your test blueprint, select the database machine in the canvas.
  2. Click the Properties tab.
  3. Click the Custom Properties tab.
  4. Click the New icon (Add).
  5. Add the custom property to change the default organizational unit.
    1. In the Name text box, enter ext.policy.activedirectory.orgunit.
    2. In the Value text box, enter ou=databases,dc=corp,dc=domain,dc=com.
    3. Deselect Overridable.
    4. Click OK.
  6. Click Finish.


The test blueprint includes the custom property, but your users do not see the custom property in the request form.

What to do next

Request your test blueprint. Verify that the record for the database machine was added to the database organizational unit, and that the record for the application machine is added to the development organizational unit. When you are satisfied with the results, you can add the custom property to your production blueprints.