You could put all your Analysts into a Security Group in AD then create a separate import that would run first to look for that security group and import those people as an Analyst. That's how I've configured it for years and it seems to work well. One thing you could do (if it's just dev) is wipe all your users (except for SA, Guest, System) and reconfigure your connections and imports to do the End User and Analyst imports separate. Then, if you are on 7.7.3 or higher, you could map the primary key to the object guid from AD. This way you have a solid key to do your imports and updates on.
↧