A DynamicGroup is a type of LDAP Group in the directory server that defines its membership using a set of search criteria in the form of an LDAP URL.

DynamicGroup as opposed to Static groups in which the Distinguished Names of the members are explicitly specified.

DynamicGroup, normally, provides an efficient way to manage groups with very large numbers of members. They are much more scalable than static groups, and their membership will be automatically updated as entries change so that the match or no longer match the group criteria.

We have seen DynamicGroup in some LDAP Server Implementations where many thousands of DynamicGroup overwhelmed the LDAP Server Implementation.

More Information#

There might be more information for this subject on one of the following: