Standard Active Directory Groups can be Promoted or Demoted from being allowed access to the ForestSafe System.
Promoted Groups are given ForestSafe User Logon privilege. Staff members of these groups are only allowed access through the Web Application.
Promoted groups can be cloned, but cloning does not copy their members, only their ForestSafe access.
ForestSafe Express only supports a single ForestSafe Group with access the ForestSafe Express Control Panel application. This is the ForestSafe Primary Logon privilege. This group can be Renamed, but it cannot be Deleted, Promoted, Demoted or Cloned.