Ivan: Students will learn how to extend the knowledge they gained from the MidPoint Deployment: First Steps training to groups, roles, and memberships. They can look forward to smooth configuration in the midPoint graphical user interface, utilizing a new and improved resource wizard.  Similar to First Steps, this course will explain how to get existing objects (including membership) into midPoint, deal with various exceptions, and manage data inconsistency. Then, the management of said objects will be transferred to midPoint, where we will learn to automate their management using other midPoint features. Some groups may be managed exclusively in the target system and not in midPoint, temporarily or permanently after the integration. Special administrator groups or groups irrelevant to user administration (such as groups of printers) can be excluded from provisioning. We will explain the relations between accounts and entitlements (which represent access rights) and show how midPoint can manage, visualize, and report them in its GUI. After graduating from this course and its prerequisite, First Steps, you will have enough information to integrate any system and manage all available objects there. We utilize a methodology that explains how to proceed with Group Synchronization, similar to our First Steps methodology.