Hi Miruna,

I appreciate the way it was originally designed and the intention behind it. The reality though for us, and I'm sure for many other customers out there, we have separate IT departments managing different things. We therefor have a dedicated Laserfiche Admin group that have nothing to do with the Network or Server support teams that manage users being loaded on AD etc. 

The other complexity is that it is not always viable to add AD groups as they exist and allocate Licenses accordingly. Users in our situation are loaded in a Higher Level AD group for instance called Finance, but the functional role in many cases are then actually broken up in to 3-4 smaller functional groups based on their actual tasks and responsibilities. From an AD perspective, the general security on the network and access is very generic among the AD groups and it is easy for them to manage it that way. From a Laserfiche perspective this is not the case though as each functional unit potentially has different Template and processes being worked on hence we create functional Laserfiche Groups and then add the individual users (Windows Accounts) to those functional groups. 

So besides from being able to manage access and security in Laserfiche more effectively based on role or process, due to the management of users being separate from AD, this would be useful to have the ability to be able to add a Description on the Windows Account and then group them accordingly from a reporting perspective.