Directory service user and groups

Before you can add users or groups from a directory service, you must first add a connection to your Microsoft Entra ID instance.

Add users or groups from Microsoft Entra ID

1. Sign into app.beyondtrust.io.
   The BeyondTrust Home page displays.
2. Click > Endpoint Privilege Management for Linux > Policy.
   The Role Based Policy page displays.
3. Click Who.
4. Click Add User / Group and select Directory Service Users and Groups.
5. On the Directory Service Users and Groups pane, select the Search Type to Find Users or Find Groups.
6. Enter the Forest and Domain.
7. Click Browse to filter by organizational unit (OU) and enter criteria in the Search for field.
8. Click Search Directory Service.
9. Check the box to import Directory Service users or user groups. The imported users or user groups are displayed in the Users list.

Remove a directory service user or group

1. Sign into app.beyondtrust.io.
   The BeyondTrust Home page displays.
2. Click > Endpoint Privilege Management for Linux > Policy.
   The Role Based Policy page displays.
3. Click Who.
4. Select a Directory Service user or group entry from the Users list.
5. On the Users and Groups pane, click Remove User or Remove Group.