Security groups to manage Centrify information
If you use the default recommended deployment script, the script automatically creates the following Active Directory security groups for managing Centrify-related objects:
Each security groups is granted the appropriate permissions to perform specific administrative tasks. For example, users who are members of the Centrify Administrators group should be able to create, modify, and delete zones.
If you are not using the recommended deployment script, you should create similar security groups for managing Centrify-related objects.