Public-health wants Workspace ONE UEM and Workspace ONE Access to t…

Question

Public-health wants Workspace ONE UEM and Workspace ONE Access to target the same Active Directory groups for enrollment and Hub access. What should the administrator do so Access policies do not drift from UEM?

Accepted Answer

Sync the same Active Directory groups into Workspace ONE Access so group-based Access policies use the Access directory, not only UEM — UEM and Access are two filing cabinets that can hold the same folders—if you only fill one, the other still looks empty. Sync the same AD groups into Access so Hub policies see the same membership UEM already uses, instead of inventing local users that wander off over time.

Answer

Create shadow local users only in Access and never sync directory groups there

Answer

Rely on UEM smart groups alone, because Access automatically inherits every UEM directory object

Answer

Bind NSX-T Manager to the public-health OU and use distributed firewall groups instead of Access directory groups

Public-health wants Workspace ONE UEM and Workspace ONE Access to target the same Active Directory groups for enrollment and Hub access. What should the administrator do so Access policies do not drift from UEM?

Short Explanation

Full Explanation