Polycom Welding System 3725-77601-001H Manual Do Utilizador

 

Users and Groups Overview

Polycom, Inc. 

251

The CMA system allows you to add local groups (that is, groups added 

manually to the system) and associate them with provisioning profiles and 

roles.
For local groups, the CMA system manages all group information and 

associations.

When the CMA system is integrated with an enterprise directory, groups 

defined to the enterprise directory are not automatically added to the CMA 

system, but you can import them into the system. 
When the CMA system is integrated with an enterprise directory, the system 

manages only three pieces of group information: the provisioning profile 

assigned to the group, the roles assigned to the group, and whether or not the 

group is Directory Viewable (that is, displayed in endpoint directories). The 

remaining group information is pulled from the enterprise directory.
To take full advantage of the CMA system, the enterprise Microsoft Active 

Directory must:
• Have Global Catalog turned ON. The Global Catalog enables searching for 

Active Directory objects in any domain without the need for subordinate 

referrals, and users can find objects of interest quickly without having to 

know what domain holds the object.

• Use universal groups. The Global Catalog stores the member attributes of 

universal groups only. It does not store local or global group attributes.

• Have a login account that has read access to all domains in the Active 

Directory that the CMA system can use. We recommend an account with 

a administrative username and a non-expiring password.

• Have the Active Directory Domain Name Service correctly configured. 

For more information about Active Directory design and deployment, see 

the Microsoft best practices guides at http://technet.microsoft.com. 

For system and endpoint directory performance purposes, two best practices 

in regards to enterprise groups are:
• Do not import more than 500 enterprise groups into a CMA system.
• Do not mark more than 200 enterprise groups as Directory Viewable.