When your organization uses Active Directory (AD) authentication, the Active Directory users and groups are imported to ServiceDesk during sync profile synchronizations. When Active Directory users are imported to ServiceDesk, they retain their group associations from Active Directory. The ServiceDesk users and groups are stored in the Process Manager database.
During automatic synchronization between ServiceDesk and Active Directory
You can create sync schedules for when ServiceDesk synchronizes with Active Directory to obtain new and updated users and groups from Active Directory. During synchronization, the user and the group data from Active Directory overwrites the user and the group data that is in ServiceDesk.
When you import your groups from Active Directory, your Active Directory groups are added with only All Users permissions by default. You must assign additional permissions to those groups after they are imported.