Microsoft Forefront Identity Manager 2010 R2 Handbook

Chapter 6. Group Management

Once you have user management in place, it is usually time to start looking at group management. In many FIM implementations I have done, the group management capability has been the key reason for choosing FIM. But still, in order to manage groups, we need to also have the users that are supposed to be members, managed by FIM.

In this chapter we will look at:

• Different group scope and types in AD and FIM
• How to manage groups using the Outlook add-in
• How to synchronize groups between HR, AD, and FIM

Group scope and types

We need to understand how groups in FIM work, and since AD (Active Directory) is so common, I will use that as a comparison.

Active Directory

If you go into AD and create a group, you are asked about Group ...