If your administrator has enabled group editing, you can modify certain properties of your managed groups directly from the web interface.
Which fields you can edit depends on your administrator’s configuration. The following group fields can potentially be made editable:
| Field | AD Attribute | Description |
|---|---|---|
| Description | description |
A text description of the group’s purpose |
mail |
The group’s email address (useful for distribution lists) | |
| Notes | info |
Free-text notes about the group |
The following group fields are always read-only and cannot be edited through the application:
| Field | Why read-only |
|---|---|
| Name | Changing a group name can break references across AD |
| Distinguished Name | Determined by AD structure |
| Group Type | Security vs. Distribution — changing this has broad implications |
| Group Scope | Global, Universal, Domain Local — changing this affects replication |
| Members count | Calculated, not a writable attribute |
| Created / Modified | Set by AD automatically |
| Managed By | Managed by AD administrators, not group managers |
Every group edit is logged in the audit trail (if logging is enabled). The log records who made the change, when, and the specific values that were changed (old value → new value).
If email notifications are configured with the Notify When Group Properties Are Updated option enabled, an instant notification is sent when a group is edited.
If you don’t see an Edit button, your administrator has disabled group editing in the admin panel Settings (Allow editing group data is turned off). Contact your administrator if you need this capability.