Skip to content
InvardiaInvardia
Why InvardiaProductsFeaturesPricingCommunity
Docs
All documentation
Product documentationPIM ManagerSecurityInsight
SettingsPIM Manager settingsSecurityInsight settingsEntra Policy Suite settings
ScriptsPIM Manager scriptsSecurityInsight scriptsEntra Policy Suite scriptsInvardia scripts
Error codesPIM Manager error codesSecurityInsight error codes
API and MCPPIM Manager APIPIM Manager MCP toolsSecurityInsight APISecurityInsight MCP tools
SecurityPIM Manager security packSecurityInsight security packEntra Policy Suite security pack
Network and designPIM Manager network guidesPIM Manager command wizardNetwork egressDesign your installationCalculate your cost
SupportSetup scriptsRemote support access
Search the docs
SupportAboutContactBook a demoCustomer portalDesign your installationFree Pro trial

PIM Manager settings · Settings > Hybrid AD & workloads

Batches at once

KeyHybridAdSyncParallel
WhereSettings > Hybrid AD & workloads > Hybrid Active Directory (PIM for AD)
TypeNumber
Default8 batches
FeaturePIM for on-premises Active Directory · Pro Business, Pro Enterprise, Pro MSP

What it does

How many group batches the hybrid worker reads from Microsoft Graph at the same time during a sync pass. Allowed 1-64. Higher is faster until Graph starts throttling. It does not change who is added or removed.

When set

When set: up to this many batches run in parallel on PowerShell 7. A value of 1 reads the groups one by one.

When blank or default

When blank / at the default: 8 batches at once.

Risk and how to reverse it

Too high causes Graph throttling and more CPU and memory on the worker; throttled reads are retried one by one, so the effect is slower syncs, not wrong membership. Reversible: change the number.

Requires

Pro (On-premises Active Directory feature), a running hybrid worker on PowerShell 7. SuperAdmin to change. Works with HybridAdSyncBatchSize.

Recommended

Keep 8. Raise it only if activations of server groups reach AD too slowly and the worker logs show no throttling.

Related settings

  • On-premises Active Directory (hybrid worker) FeatureGates.hybrid.ad
  • AD OU (Day2Day Admins) NamingConventions.PathAdmins
  • AD OU (High Priv Admins) NamingConventions.PathAdminsL0T0
  • AD group marker HybridAdGroupMarker
  • Pattern override HybridAdGroupPattern
  • Cloud admin suffix HybridAdCloudSuffix
  • AD admin suffix HybridAdAccountSuffix
  • OU for new AD groups HybridAdGroupsOu
  • Per-server group format HybridAdServerGroupFormat
  • Shared server-admins group HybridAdServerAdminsGroup
  • Never remove HybridAdProtectedMembers
  • Groups per batch HybridAdSyncBatchSize
  • Read activation end times as UTC HybridAdEndTimeAsUtc
  • Server discovery: only these OUs HybridAdServerSearchOus
  • Server discovery: OUs to leave out HybridAdServerExcludeOus
  • Server discovery: last changed within (days) HybridAdServerActiveDays
  • Server discovery: only names like HybridAdServerNameInclude
  • Server discovery: never names like HybridAdServerNameExclude
  • New servers in these OUs are offered for approval as one list HybridAdServerAutoGroupOus
  • Server groups created per run HybridAdServerAutoGroupMaxPerRun
  • Clean-up: also look for old PIM groups in these OUs HybridAdCleanupOus

Documented for PIM Manager 3.0.70. Written by the PIM Manager team; Invardia publishes it. · All settings · Security review pack

InvardiaInvardia

See the risk. Control the access.

Products

PIM ManagerSecurityInsightEntra Policy SuiteAll featuresPricingFree 60-day Pro trialBook a demoWhy Invardia

Docs

DocumentationSearch the docsPIM Manager settingsSecurityInsight settingsPIM network guidesCommand wizardNetwork egressPIM Manager design configuratorSecurityInsight design configuratorDesign your installationCalculate your cost

Company

AboutContactCustomer portalSupportHow support worksHow updates reach youSupport in numbersSetup scriptsRemote support accessContact: info@invardia.com

Legal

Terms of saleLicence termsData processingPrivacyCookiesCompany information
© 2026 Invardia – a brand of 2LINKIT, founded and owned by Morten Knudsen · Strandvejen 21A, 6000 Kolding, Denmark · VAT DK39208032 · Contact: info@invardia.com