PIM Manager settings · Settings > Hybrid AD & workloads
Groups per batch
| Key | HybridAdSyncBatchSize |
|---|---|
| Where | Settings > Hybrid AD & workloads > Hybrid Active Directory (PIM for AD) |
| Type | Number |
| Default | 50 groups |
| Feature | PIM for on-premises Active Directory · Pro Business, Pro Enterprise, Pro MSP |
What it does
How many mirrored groups one parallel batch reads from Microsoft Graph per sync pass when the worker looks up who has each group activated. Allowed 1-1000. It is a speed setting only -- it does not change who is added or removed.
When set
When set: the groups of a sync pass are cut into batches of this size, each read in its own parallel runspace (PowerShell 7) through Graph batch calls. It applies to both sync lanes, server groups and critical groups.
When blank or default
When blank / at the default: 50 groups per batch.
Risk and how to reverse it
Very large batches make each runspace slower and can hit Graph throttling; very small ones add overhead. A throttled or failed read is retried one by one, so membership is not lost -- only the time an activation takes to reach AD grows. Reversible: change the number.
Requires
Pro (On-premises Active Directory feature), a running hybrid worker on PowerShell 7 (on Windows PowerShell 5.1 reads are one by one). SuperAdmin to change. Works with HybridAdSyncParallel.
Recommended
Keep 50. Tune only with many hundreds of server groups, together with Batches at once.
Related settings
- On-premises Active Directory (hybrid worker) FeatureGates.hybrid.ad
- AD OU (Day2Day Admins) NamingConventions.PathAdmins
- AD OU (High Priv Admins) NamingConventions.PathAdminsL0T0
- AD group marker HybridAdGroupMarker
- Pattern override HybridAdGroupPattern
- Cloud admin suffix HybridAdCloudSuffix
- AD admin suffix HybridAdAccountSuffix
- OU for new AD groups HybridAdGroupsOu
- Per-server group format HybridAdServerGroupFormat
- Shared server-admins group HybridAdServerAdminsGroup
- Never remove HybridAdProtectedMembers
- Batches at once HybridAdSyncParallel
- Read activation end times as UTC HybridAdEndTimeAsUtc
- Server discovery: only these OUs HybridAdServerSearchOus
- Server discovery: OUs to leave out HybridAdServerExcludeOus
- Server discovery: last changed within (days) HybridAdServerActiveDays
- Server discovery: only names like HybridAdServerNameInclude
- Server discovery: never names like HybridAdServerNameExclude
- New servers in these OUs are offered for approval as one list HybridAdServerAutoGroupOus
- Server groups created per run HybridAdServerAutoGroupMaxPerRun
- Clean-up: also look for old PIM groups in these OUs HybridAdCleanupOus
Documented for PIM Manager 3.0.70. Written by the PIM Manager team; Invardia publishes it. · All settings · Security review pack