The following table describes the UI elements for this dialog box.

Item Description

Name

Provides a space for you to type the name of the new application group. An application group is a group of users of the application (for example, "Building 40 Users").

An application name must not already exist in the authorization store. It has a maximum size limit of 512 bytes. It cannot contain any of the characters \ / : * ? " < > | and [Tab].

Description

Provides a space for you to type the description of the new application group. The description does not affect the functionality of Authorization Manager and should be meaningful to you. The description has a maximum size limit of 1,024 bytes.

Group Type

Basic Application Group

Specifies that the new application group is of the basic type. The basic type of application group is based on Windows users and groups, which might include local groups, and global or universal groups that are stored in Active Directory Domain Services (AD DS).

LDAP Query Application Group

Specifies that the new application group is defined by a Lightweight Directory Access Protocol (LDAP) query. LDAP queries are used to find objects in (AD DS) and other LDAP-compliant directories. For example, the query (&(objectCategory=person)(objectClass=user)(!cn=andy)) finds everyone except Andy. The query (memberOf=CN= StatusReports,OU=Distribution Lists,DC=northwindtraders,DC=com) finds all members of the StatusReports alias at northwindtraders.com.

Business Rule Application Group

Specifies that the new application group will be defined by a business rule. Business rules are created by writing a script in VBScript or JScript.

Additional references