How To Populate Dynamic Role With AD Group Members

You can build this pretty easily with the wizard:

Which builds the SQL:

(UID_Person in (select UID_Person from UNSAccount join UNSAccountInUNSGroup on UNSAccount.UID_UNSAccount = UNSAccountInUNSGroup.UID_UNSAccount where (UNSAccount.UID_UNSRoot = N'***YOUR DOMAIN UID ****') and (UNSAccountInUNSGroup.UID_UNSGroup in (select UID_UNSGroup from UNSGroup where cn = N'GroupA')))) and (UID_Person in (select UID_Person from UNSAccount join UNSAccountInUNSGroup on UNSAccount.UID_UNSAccount = UNSAccountInUNSGroup.UID_UNSAccount where (UNSAccount.UID_UNSRoot = N'***YOUR DOMAIN UID ****') and (UNSAccountInUNSGroup.UID_UNSGroup in (select UID_UNSGroup from UNSGroup where cn = N'GroupB'))))

Thank you very much George!  I don't know how I missed those options.

Hi George, as a complete newby to D1IM could you please let me know what version of D1IM this applies to ? And where would I find the 'wizard' ?  Thank You, Todd (D1IM 6.1.2)

Hi Todd,

This is not version specific.  Will apply to any version.  You can find these options in the Manager, under "Create a Dynamic Role. "  You will probably find this helpful: http://documents.software.dell.com/identity-manager/6.1.2/identity-management-administration-guide/working-with-dynamic-roles