@Venu1010 ,First, create a business role named, for example, “Basic Access.” Then, define a rule using a condition such as (usertype = “Employee”) OR (usertype = “Contractor”),or any relevant attribute coming from the target application. Next, assign this rule to the “Basic Access” role. Ensure that the corresponding group exists in Active Directory (AD). This setup will automatically assign any new user who matches the condition to the “Basic Access” AD group.