In order to import your groups as security roles you need to use the AD connector rule. In this rule you need to specify which groups to import. If you have a naming convention it is easier to import however you can select them individually. Once your groups are added ensure you are select the correct Type to import, perhaps that is why you are receving an error.

If you need some screenshots please let me know.

Follow these steps.

Thanks for your answers

The problem with the AD connector, is that I need to add each group manually in the rule, in order to import these.

I want to know if there is a possibility to import each new group (in a special OU for example) automatically.

Thanks a lot.

GREG

I understand what you are trying to do now. I do not think this is possible once you select the "Role and Account" resources to import. Anything other than this selection allows for the "starting from" to be selected which is where you would select the starting OU.

Sounds like an enhancement request to have this added as an option for this type of import rule.

I stumbled across a workaround for your issue. We have a similar environment with around 20 specific roles/AD Groups (each supporting a different group of resources). They all belong to a parent AD group which assigns base privileges in SMP. If you import the parent AD group, it will pull in all the individual member groups as well.

So basically, do this:

1. Create an AD security group and add all the other security groups you want to import into SMP.
2. Create a schedule to import the parent group created in step 1 in the AD connector page.
3. All of the AD security groups should now show up in the roles page of SMP.

Hope this helps.

Also, unless I am missing something, why not just add all of the groups you need to the one rule? That will work too.