We need to understand how groups in FIM work, and since AD (Active Directory) is so common, I will use that as a comparison.
If you go into AD and create a group, you are asked about Group scope and Group type.
This selection will end up in the attribute in AD called groupType
. This is a bitmask value, as described in the following table (as well as described at http://msdn.microsoft.com/en-us/library/cc223142):
Value |
Description |
---|---|
1 (0x00000001) |
Specifies a group that is created by the system. If you look in AD in the |
2 (0x00000002) |
Specifies a group with global scope. |
4 (0x00000004) |
Specifies a group with domain local scope. |
8 (0x00000008) |
Specifies a group with universal scope. |
16 (0x00000010) |
Specifies an |
32 (0x00000020) |
Specifies an |
2147483648 (0x80000000) |
Specifies... |