Group sync status (7.1.0)

How to use the Group sync status page

The group sync status page lists groups that have their membership synced with an Active Directory distribution group and security profiles that are synced with AD security groups. It provides information on the "sync health", or whether the group and security profile synchronizations are happening the way they should.

For each entry, you see the name of the Active Directory group, the corresponding group page or security profile in TF, the date and time of the last sync, and an icon indicating the sync health. If the sync health is good, a green checkmark icon appears. If the sync health is not good, a red X icon appears.

How to check sync health

  1. Go to the Administration panel: Users & security section > Group sync status page.
  2. Select the tab on the left that you want to check.
  3. Look in the Sync health column to see the icons indicating sync health.
    6.7Admin8775SyncHealth.pngOR 6.7Admin8775UnhealthySync.png
Sync health may not be good if nightly sync is not enabled or if the group membership has not been manually refreshed for quite some time.

How to repair a sync

If the sync health of an AD group is not good, refresh group page membership or security profile membership following the instructions below:
  1. Go to the Administration panel: Users & security section > Active Directory page.
  2. Scroll down to the On-Demand synchronization heading.
  3. Select the checkbox for either "Refresh security profile memberships from AD groups" or "Refresh group page membership from AD group", depending on what type of sync needs refreshing.
  4. Click Synchronize now.
  5. Go back to the Group sync status page to check the sync health.
  6. If sync health still isn't good, go to the Administration panel > Logs & statistics section > System logs page and check the system logs for error messages.
For more information, see group page synchronization or learn how to enable daily synchronization tasks.