You must create a provisioned group for administrators to ensure that you can enforce administrator rights. After you have created a provisioned group, make sure that you apply the provisioned group to a provisioning policy . Group provisioning policies preserve the integrity of your local group accounts.
...