Any OU without a parent is considered a top-level OU. You should consider your entire organization's OU structure before adding a top-level OU. For more information, see the article titled "Structuring OUs". You will be asked to select a permission scheme when you create the OU, so if you want to use a custom scheme you should define it before you begin.
To add a new top-level OU:
- Click OUs > All OUs.
- Click Add New.
- Enter an OU Name to identify the OU throughout the application. The name must be unique among OUs.
- In the Parent OU field, select None to designate this as a top-level OU, or select a parent OU to designate this as a child OU.
- In the Permissions Scheme drop-down menu, select the Default OU Permissions Scheme or another custom scheme.
- Note: if custom permission schemes are turned off, you will not see this field, and the default permission scheme will be used.
- In the Owners drop-down menus, select at least a user or a group.
- Enter an optional Description.
- Click Create OU.
By default, Owners have full access to the OU if you are using the Default OU Permissions Scheme.