PIM Manager settings · Settings > Hybrid AD & workloads
Pattern override
| Key | HybridAdGroupPattern |
|---|---|
| Where | Settings > Hybrid AD & workloads > Hybrid Active Directory (PIM for AD) |
| Type | Text |
| Default | Blank (derived: your group prefix + * + the AD group marker) |
| Feature | PIM for on-premises Active Directory · Pro Business, Pro Enterprise, Pro MSP |
| Confirmation | PIM Manager asks you to confirm before it is switched on. |
What it does
A full wildcard that replaces the derived pattern for which PIM groups are mirrored to AD. Only groups defined in PIM Manager are ever considered -- the pattern never reaches AD groups PIM Manager does not define. The card's preview shows the effective pattern and how many defined groups match today.
When set
When set: every defined PIM group whose name matches the wildcard is mirrored to AD and has its AD membership synced from active PIM activations. The value must contain * and may not be * alone. The marker setting is then ignored for matching.
When blank or default
When blank / at the default: the pattern is derived from your naming -- your group name prefix + * + the AD group marker (for example PIM-*-S_AD).
Risk and how to reverse it
A wider pattern brings more groups under the sync: in each newly matched AD group, users carrying the AD admin suffix who have no active PIM activation are removed, and an existing AD group of the same name is adopted. A narrower pattern leaves dropped groups unmanaged with their members in place. Reversible: clear the field; the derived pattern applies on the next pass.
Requires
Pro (On-premises Active Directory feature) and a running hybrid worker. SuperAdmin to change. Overrides HybridAdGroupMarker for matching.
Recommended
Leave blank. Set it only when your AD-backed groups do not follow the prefix-plus-marker shape, and check the preview count before saving.
Related settings
- On-premises Active Directory (hybrid worker) FeatureGates.hybrid.ad
- AD OU (Day2Day Admins) NamingConventions.PathAdmins
- AD OU (High Priv Admins) NamingConventions.PathAdminsL0T0
- AD group marker HybridAdGroupMarker
- Cloud admin suffix HybridAdCloudSuffix
- AD admin suffix HybridAdAccountSuffix
- OU for new AD groups HybridAdGroupsOu
- Per-server group format HybridAdServerGroupFormat
- Shared server-admins group HybridAdServerAdminsGroup
- Never remove HybridAdProtectedMembers
- Groups per batch HybridAdSyncBatchSize
- Batches at once HybridAdSyncParallel
- Read activation end times as UTC HybridAdEndTimeAsUtc
- Server discovery: only these OUs HybridAdServerSearchOus
- Server discovery: OUs to leave out HybridAdServerExcludeOus
- Server discovery: last changed within (days) HybridAdServerActiveDays
- Server discovery: only names like HybridAdServerNameInclude
- Server discovery: never names like HybridAdServerNameExclude
- New servers in these OUs are offered for approval as one list HybridAdServerAutoGroupOus
- Server groups created per run HybridAdServerAutoGroupMaxPerRun
- Clean-up: also look for old PIM groups in these OUs HybridAdCleanupOus
Documented for PIM Manager 3.0.70. Written by the PIM Manager team; Invardia publishes it. · All settings · Security review pack