We need to understand how groups in MIM work, and since Active Directory is so common, we will use that as a comparison.
If you go into AD and create a group, you are asked about Group scope and Group type.
This selection will end up in the attribute called groupType
in AD. This is a bitmask attribute stored in Active Directory, as described in the following table (as well as at http://bit.ly/GroupTypeFlags):
Value |
Description |
---|---|
1 ( |
Specifies a group that is created by the system. If you look at AD in the |
2 ( |
Specifies a group with global scope. |
4 ( |
Specifies a group with domain local scope. |
8 ( |
Specifies a group with universal scope. |
16 ( |
Specifies an |
32 ( |
Specifies an |
2147483648 ( |
Specifies... |