After creating an LDAP account, define a group to refer to the external LDAP group. For information on creating a user group, see Adding a User Group.
To configure an existing user group, perform the following:
On the home page of the console, click Command Control.
In the navigation pane, click the Account Groups icon, then click User Groups.
In the details pane, select the user group that you want to modify, then click the edit icon next to the user group name.
Configure the following fields:
Name: Specify a name for the group.
Type: You must select the External Group check box.
External Group: Includes the users you have added in this group
Description: Describe the purpose of this user group.
Manager Name, Manager Tel., Manager Email: Specify the name, telephone number, and e-mail address of the manager of this user group.
Users: Add or change the users you want to include in this group. You can type the user names, one on each line, or paste them from elsewhere.
For example, the external group can be matched by using the %:=~/^[Cc][Nn]=G*/ regular expression,. This expression matches all external groups starting with Cn=G and followed by anything where user is part of the group.
User Groups: From the list of groups you have already defined, select the user groups you want to include as subgroups of this user group. You can also add subgroups to a by dragging and dropping the groups to the target user group in the navigation pane.
Click Finish.
You can now use this user group in rule conditions or as a script entity.