I've been thinking about how to transition existing AD SGs to become FIM-managed and would like opinions on whether the plan below is workable. The existing AD SGs have been imported into FIM, but have manual membership, no equivalent set exists in FIM and the users have no attribute relating to membership of that SG. To be fully FIM managed we need the users in the current SG to have a related attribute, be members of an equivalent FIM set, and the SG to be criteria based. AFAIK an MPR can only be based on a set transition, not an SG transition, so there's no direct way to make the MPR do the work of creating the equivalent set by changing the attributes of all the users which are members of the SG. I was thinking of creating a (temporary) set with dynamic filter-based membership based on the existing SG, and a permanent set which would be used as the criteria for the SG later. An MPR based on the set-transition of the temporary set would then change attributes of the users in FIM, making them members of the permanent set. The SG could then be changed from manually managed to criteria based, and the temporary set deleted. Thoughts?

The silence was deafening. I'll try it and post on how successful it turns out to be.