Domains and organizational units
Domains and organizational units are included in the ODBC database to mirror the data structure used by Active Directory.
Organizational units are designed to hold user accounts and authenticator records. They allow to group users according to department, job function, or other criteria. They also allow authenticators to be allocated for auto-assignment to single or multiple groups of users. Both, domains and organizational units can be used to limit administrators to a group of users and/or authenticators.
Figure: Domains and organizational units