The dynamic domain has only one group named all. All dynamic users belong to the all group. No additional dynamic groups can be created.

The dynamic domain cannot use groups for differentiation of user permissions by group assignment of privileges or rights, because no password is stored to authenticate who is currently using a given user name. The data sources enabled with pass-through login perform the authentication and authorization security.