Users and Groups may be synchronised with a Active Directory. If you are working in a large organisation, syncing the whole AD is a bad idea. Group Filter lets you define which groups to synchronise and therefore which users in those groups will be synchronised.

Active directory Setup

Group Filter samples

All groups starting with "pulse-it"         (&(objectClass=Group)(cn=pulse-it*))