Setting User Membership by LDAP Location

You can set LDAP rules and policies for users located in certain Organizational Units (OUs) on the LDAP server. For more information about the LDAP Group Membership by Organizational Unit feature, see LDAP Group Membership by Organizational Unit . For the full procedure for creating new members, see Creating a New User Group for RADIUS Users .

To set a user membership by LDAP location:
1
Navigate to Users > Local Groups.
2
Click either the Edit icon for a local group or the Add Group… button. The Add/Edit Group dialog displays.

3
Select the Memberships are set by user's location in the LDAP directory checkbox.
* 
TIP: Local users and other groups also can be made members of the group on the Members tab.
4
Select one of the For users options:
•
at or under the given location (default)
•
at the given location
5
When you enable the Memberships are set by user's location in the LDAP directory setting, the LDAP Location field becomes active. Enter the location in the LDAP directory tree. The location can be given as a path (for example, domain.com/users) or as an LDAP distinguished name.
* 
NOTE: If LDAP user group mirroring is enabled, then mirror user groups this field is read-only and displays the location in the LDAP directory of the mirrored group.
6
Click OK.