Google Apps Directory Sync Administration Guide - Manual (Page 71)

Configuration 71
Add Org Unit Search Rule
To add a new search rule, click Add Search Rule and specify the fields in the
dialog box. After specifying the fields, click Apply to submit your changes, or Test
LDAP Query to test the search rule.
LDAP Org Unit Search
Rule Setting
Description
Org Unit Description
Attribute An LDAP attribute that contains the description of each
org unit.
This field is optional. If left blank, your Org Units will not
contain a description when created.
Example: description
Scope This determines where in the LDAP directory this rule
applies. Choose which option to use:
• Sub-tree: All objects matched by the search, and
anything under those objects, recursively. Sub-
tree gives the broadest search, but for very large
organizations this can be load-intensive and cause
system problems.
• One-level: All objects matched by the search, and
anything one level underneath them. Does not look
further than one level. One-level provides a limited
search that will avoid causing extreme load for
very large organizations.
• Object: Only objects directly matched by the
search. No recursion of any kind. Object is rarely
used except with very complex LDAP searches. It
allows a search only on the specified object.
Example: Sub-tree
Rule The search rule for org unit sync to match. This rule is
a standard LDAP query, and allows sophisticated logic
and complex rules for searching. For more information
about LDAP search filters, see “About LDAP Queries”
on page 41.