A dynamic group is one whose membership changes based on a defined set of criteria that you configure in the group’s properties. You can make any group dynamic or remove the dynamic filter from any group that has it configured. This feature also provides the capability to add group members to a static list or to an excluded list. Group members in these lists will not be impacted by the dynamic criteria.
If you revert a dynamic group back to a regular group, any members in the Static Member List are added to the groups membership and excluded members and dynamic filters are ignored. You can make existing groups dynamic or create a new dynamic group in both the Delegation and Configuration Console and in the Web Console.
To make a group dynamic:
Locate the group in applicable console.
Delegation and Configuration: Go to All My Managed Objects > Find Now.
NOTE:To enable the Query Builder, click Browse and select a domain, container, or OU.
Web Console: Go to Management > Search.
Open the group’s Properties, and select Make group dynamic in the Dynamic Member Filter tab.
Add the desired LDAP and virtual attributes to filter group membership.
Add any desired static or excluded members to the dynamic group, and apply your changes.
To make a new dynamic group:
Delegation and Configuration: Right-click the domain or sub-node in All My Managed Objects, and select New > Dynamic Group.
Web Console: Go to Management > Create > New Dynamic Group.