How do I associate an Endpoint Policy with a group of users?

[KevinYYC]

I am using forticlient.forticloud.com/ems Version 7.4.3 build1926. I have deployed FortiClient 7.4.3.1790 to my endpoints.

I haven't found a way to access my on site DC.

[sharmar · Accepted solution]

Hello @KevinYYC 

You can sync your local AD with the EMS, so that you can apply the dynamic policy from the EMS, based on security group, OU or username etc. In the  EMS cloud case, sync the domain through AD connector would be the best approach. 

Please read this for more details: https://docs.fortinet.com/document/forticlient/7.4.3/ems-administration-guide/787816/ad-connector

Thanks

[KevinYYC]

@koletmo8 
Thank you for that suggestion. We are not using Azure.

While I'm happy to evaluate any suggestions provided, I suspect my only option is to do as @sharmar suggests. I will accept his solution but doubt I will be able to implement it.