how to manage group sys-id in code promotion from sub production - production ?

[MThomas1]

Hello,

Our user and group are managed thru ActiveDirectory. Groups created in AD and sync to SN application.

we are doing a project , development in sub production , and promoting to production.

Group sysids are using in code. So, DEV/test  group- sysid  is different from Prod group-sysid . 

what is the best approach to address this?  we want to keep AD sync for group/user management. 

Thank you.

[Tanushree Maiti]

Hi @MThomas1 ,

Generally, foundation data records (like group,user,location, BU etc) - BAU creates in the Production environment first as per business request.

The same data is then synchronized across all sub-production environments.

Moving foundation data from sub-production to Production is not recommended in a live instance, as it may lead to data inconsistencies or overwrite existing production configurations.

Also many integrations and backend workflows are mapped to specific sys_ids. Altering them can instantly break CMDB reconciliations, user provisioning, or catalog approvals.