Knowledgebase
Syncing against multiple groups or Org Units
Last modified on 26 March 2014 02:55 PM

I would like to import/sync users from multiple groups or Organization Units. Is this possible?

PaperCut’s default user import configuration is to import all users from the selected domain. This is appropriate for most, however some organizations may wish to import a subset of users for various reasons. PaperCut can be configured to import a subset of users by selecting a group of users. A group may be a domain-level group, or in Active Directory may also be an Organizational Unit (prefixed by OU: in PaperCut NG’s group list).

A common question we get is, “How do I import users from multiple Groups?” PaperCut is designed to import/sync users from multiple groups or OU’s. You will want to determine a model that best matches your environment.

Multiple Group/OU Sync (v14.1 and above)

It is possible to import multiple groups or Organizational Units using any sync source such as Windows Active Directory, LDAP or operating system local groups by using the multiple group selection feature within PaperCut.
1. Open the Options → User/Group Sync tab
2. Select the Select Groups button and select the desired OU’s/Groups
3. Select the target groups or OU’s as the import source in PaperCut.

Windows Active Directory Multiple Group Sync via Nesting

It is possible to import users from multiple sources such as two or more Active Directory groups with a parent group and nesting.
1. Define a group called “PaperCut Users” or equivalent.
2. Add the target import groups (multiple groups) as members of this group.
3. Select the newly created “PaperCut Users” group as the import source in PaperCut.

Single Group Sync

A single group can be used to identify the users you want to import.
1. Define a group called “PaperCut Users” or equivalent.
2. Add the target import groups (multiple groups) as members of this group.
3. Select the newly created “PaperCut Users” group as the import source in PaperCut.

Note: For LDAP users prior to 14.1 a single group or OU sync was the primary option for importing a subset of users.

If a group or Organizational Unit does not already exist with the subset of users you want to be import it may be necessary to create a new group or OU that contains the users to be imported.

If for technical reasons it is not possible to create a new group for synchronization then consider applying for a license exception, which will allow you to import more users into PaperCut than your license allows you to track.