Change Guardian uses LDAP to process each user group in a policy as a list of the group members. For example, if a policy monitors Group A, LDAP allows Change Guardian to monitor the activity performed by the individual users in Group A. If the policy returns an event, the name of the user performing the change is included in the event report.
You must configure LDAP settings for every grouped resource you intend to monitor. If you do not configure LDAP settings for a grouped resource, and you specify that grouped resource in a policy, the Policy Editor submits the policy to the Change Guardian server, but the policy cannot monitor the group members correctly.
To access LDAP settings, click Settings > LDAP Settings.
The LDAP Settings window displays the domain name for each resource. From this window, you can create, edit, and delete settings.
NOTE:You cannot delete a setting that an active policy is using.
When you create or edit a setting, you define the domain, the credentials to allow access to group information, and the polling interval.