Can be Domain Local, can be Global, can be even computer local group.

Here is described to use Domain Local:

Using Security Groups

But I used Global in many projects and it works as expected.

Agree with Dominick

I just wanted to caution you that the installation uses Computer Local Groups by default, which means if you simply click Next -> Next, it will create them for you.  You need to make sure to change them to the format <domain>\<groupName> on the page where the groups are listed.

Hi,

What should the 5 default FIM security groups scope be?

Domain Local or Global?

Thx