Associate Active Directory universal or global groups with Workflow groups

Domain users are Windows users who are members of one or more Windows domain groups.

About this task

Important: You must have created your Windows users and added them to the appropriate active directory universal or global groups before you can map these groups to Workflow groups. However, a domain user may join a domain group that has already been mapped to a Workflow group.

Procedure

  1. In the navigator, click Personnel > Groups.
  2. From the list of groups, select the group you want to associate an active directory group with.
  3. In the Displays panel, click Security Editor.
  4. Click the Domain Users tab, and then use one of the following methods to map active directory groups to the Workflow group.
    MethodDescription
    Browse for unmapped active directory universal or global groups
    1. Click Add/Remove Groups.

      The Mapping Groups dialog box appears.

    2. From the Available Trusted Domains list, select the domain containing the active directory groups that you want to map to the selected Workflow group.
    3. To find unmapped groups on the selected domain, in Search for universal or global groups, enter search criteria.
      Note: The maximum number of results supported is 50. If more than this number is returned, you must narrow your search criteria.
    4. From the Unmapped Domain Groups list, select the active directory groups you want to map, click the right arrow, and then click OK.
    Tip:
    • You can enter search criteria using a wildcard character (*) combined with other characters.
    • To add multiple active directory groups to a Workflow group, press the Ctrl key, and then select all of the active directory groups that you want to add to the Workflow group, or click the double right arrow to add all of the active directory groups.
    • To remove an active directory group association from a Workflow group, from the Mapped Domain Groups list, select the active directory group that you want to remove, and then click the left arrow. Press the Ctrl key to select multiple groups, or click the double left arrow to remove all of the mapped active directory groups.
    Edit the active directory universal or global groups list
    1. In the Domain Name column, double-click in the first available row.
    2. Enter the name of the domain that contains the active directory groups that you want to map to the current Workflow group.
    3. In the Group Name column, double-click the cell, and then enter the name of the active directory group you want to map.
    Copy and paste a list of active directory groups from an Excel spreadsheet
    1. Open the Excel spreadsheet that contains your domain names and active directory group names.
    2. Copy the two columns of data (the first column contains the domain names; the second column contains the active directory group names).
    3. In Workflow, on the Domain Users tab, in the Active Directory groups table, double-click any cell, and then paste the data from the Excel spreadsheet.
      Note: If there is existing data in the table, then the newly pasted data is added after the last row of the existing data.
    Tip: You can also copy the data from the Active Directory groups table to an Excel spreadsheet. Press the Ctrl key to select multiple rows to copy, then in Excel, select a single cell, and then paste the data.
  5. Click Save.
    The active directory groups are mapped to the selected Workflow group and are displayed in the Active Directory groups list. The domain users who are members of the mapped active directory groups are displayed in the Domain Users list.
    Note: All domain names are validated against the domain before they are saved in Workflow. If the domain or active directory group name is entered incorrectly, an error message appears and the row is cleared.