Assign a group to a different policy

You can modify the web policy to which members (i.e., users) of synchronized groups are to be assigned. This assignment takes place either when the user is initially created on the cloud service or when group membership or group policy assignment changes, depending on how you configured the User policy assignment setting on the Identity Management page (see Configure identity management).


	Note Data from LDAP is read-only; you cannot change users and groups relationships that were synchronized from the client directory. If a change is required, you must make it in the client directory itself.

Open the policy to which you want to assign groups. For example, select Web > Policy Management > Policies > DEFAULT.

Click the End Users tab.

Under Identity Management, click Modify list of groups.

Select the groups you want assigned to this policy.

Click Submit.

If you set User policy assignment to Follow group membership when you configured directory synchronization, the effect of this action is to assign all members of the group already in the service to this policy. Users that are not members of groups, or users in groups that are not explicitly assigned to a policy, are automatically assigned to the default policy. All future additional users who are members of the group are synchronized into the policy as well.

If you set User policy assignment to Fixed, the change affects only future additional users.