|Managing the organizational structure / Importing from Active Directory|
You need to make sure you have the appropriate access rights when importing the organizational structure. The following information tells you about the access rights requirements.
If a container with Read only or Denied access is included in the synchronization because it is on the way up to the root and the container contains a group with Full access, this group will be synchronized. Groups with Read only or Denied access will not.