There are two options for managing your Groups and IDs in Cyfin or CyBlock. You can manage them either “Inside the Product” or “Outside the Product.”
By choosing to manage your Groups and IDs “Inside the Product,” it means exactly that. You can manually add, delete and move Groups and IDs in the product. If you import your Groups and IDs from Active Directory or a text file, each time your Groups and IDs are imported either manually or scheduled, only NEW Groups and IDs will import. The new Groups and IDs that are imported will be based on your configuration setup in the Active Directory Setup wizard. Your existing Groups and IDs will not be modified, which means if a user left or moved departments, he/she will have to be deleted or moved in the product. If you want to have users in the VIP group, you must use the “Inside the Product” option.
If you select to manage your Groups and IDs “Outside the Product,” then you will be only managing and making changes to your Groups and IDs at the directory source. Each time Groups and IDs are imported, whether manually or scheduled from Active Directory or a text file, all Groups and IDs will be updated to identically match that configuration. Typically this option is not used because the directory source is grouped according to your network setup and not according to how you will want to apply Web-use policies.