In MailMarshal Configurator, go to Configurator Root -> MailMarshal Configurator -> Policy Elements -> User Groups. Click New User Group to start the wizard.

Click Next to continue.

Select the new connector from the drop-down list. Click Next to continue.

In this screen we need to enter the DN's of the LDAP groups that we want to import. There are 2 ways, to obtain the list of LDAP groups available in Penrose Server. One option is to click the Browse button to display all available groups. The groups will take a while (about 5 minutes) to appear because MailMarshal is trying to download the entire directory from Penrose Server.

Once the groups appear, select the Organizational Units/Containers marked with the yellow folder icons from the right panel (see picture). Do not select the group objects. Click OK to continue.
Another option is to execute the following LDAP command to view all available groups:

ldapsearch -h 192.168.0.70 -p 10389 -D uid=admin,ou=system -w secret -x -LLL -b "dc=Example,dc=com" "(objectClass=groupOfNames)" dn

This command will immediately return the DN's of the groups:

dn: cn=Accepted Emails,ou=Groups,dc=Example,dc=com

dn: cn=optout_jokes,ou=Groups,dc=Example,dc=com

dn: cn=optout_movies,ou=Groups,dc=Example,dc=com

...

Convert each line by removing the "dn:" and adding "*," in front of it. The result should look like the following:

*,cn=Accepted Emails,ou=Groups,dc=Example,dc=com
*,cn=optout_jokes,ou=Groups,dc=Example,dc=com
*,cn=optout_movies,ou=Groups,dc=Example,dc=com
...

Enter the above groups into the wizard.

Click Next to continue.

Verify the information, then click Finish. The new groups will appear in the list of User Groups.