The following graphic shows the Option Pack account self-service screen for Active Directory:
Specifies the user's Active Directory accounts. If a user has multiple accounts in Active Directory, they all appear in this field. Selecting an account shows the Active Directory values associated with this particular account.
Modifies the Active Directory account's container (OU). This is equivalent to a Move account and not to a Delete and Create account (the SID is kept). The container value is case sensitive. For example, to move the account from Users to Administrators, type ou=Administrators and the rest of the DN.
Defines a filter to limit the number of groups shown. Use this filter option if you have many groups and want to restrain the groups shown.
Note: Wildcards are not necessary in the filter. For example, to search for Active Directory Groups containing "Administrator", type Administrator in the filter field and click Apply filter.
These selection boxes allow you to request membership in Active Directory groups. This membership may be subject to SOD interception and workflow approval. Each value can be added or removed independently. Current Values represent the Active Directory groups the user currently has and Available Values represent the list of all Active Directory groups available for the user to request.
Note: To configure the available list of Active Directory groups, use the Account Screen Configuration tool to specify the source for any attribute. In this case, you would select the Provisioning Server. The groups are then taken from the Active Directory domain.