Deciding what to synchronize

You do not need to provision all of the groups and users in your directory. Instead, provision only groups that are useful to the cloud service.

Consider this example:

If you are going to set up a policy for members of a US Telesales department that gives them special permission to access certain websites, you should provision the “US Telesales” group. There is no need to provision the “London” group if you are not going to set up geographical policies in the cloud service, even if the London users are going to be using the service.

Sometimes when users are provisioned to the cloud service, they are members of multiple groups, but only a subset of those groups is provisioned. This is not a problem: the cloud service is designed to accept users with group references that are not on the service.