Table of Contents
Overview and Requirements
The CalGroups-AD Sync feature allows groups to automatically appear in Active Directory (AD). Before beginning, please note that SPAs and CalNet Sponsored Guests are not eligible for AD sync.
- Admin access to a CalGroups Org or App folder is required
- Request access by emailing calnet-admin@berkeley.edu to enable the sync feature for your folder space
- Member limit is 3500 members; contact calnet-admin@berkeley.edu for groups exceeding this size
How to Sync Your CalGroup to AD
- Navigate to your group in CalGroups
- Click the More Actions button
- Select Edit Provisioning Info
- Select Yes for Sync to AD Groups
- Click Update to save your changes
Technical Details and Timing
Syncing from CalGroups to AD is "flat," meaning the AD group will contain all direct and indirect members, but nested group IDs will not appear in AD. Please also keep the following in mind:
- Wait at least 15 minutes for changes in CalGroups to reflect in AD
- Verify by looking for the Group ID in AD, as it may differ from the Group Name
- Toggle the sync to No if you need to remove the group from AD entirely
- Note that Title Code groups are generally excluded from AD sync
Privacy and Visibility
Any group synced to AD is visible to anyone with an account in AD. If you need to hide the specific purpose of a group, you should change the CalGroups Group ID before syncing, as it is the ID (and not the name) that populates the cn and samAccountName fields in Active Directory.