Our fourth principle of Grouper good practice is:

• Only create ‘Applications’ groups if you need them to be provisioned to AD or available as Shibboleth attributes.

There are two reasons for this:

1. The GrouperGroups section of the AD is already quite busy and cluttered, adding unnecessary groups will only make it worse.
2. The Grouper to AD provisioning process is quite inefficient and can slow down if there are a large number of changes. Minimising the number of groups being provisioned to AD will avoid any unnecessary slowing down of the provisioning process.