# AP Profiles

{% hint style="info" %}
AP Profiles refers to Auto-Provision Profiles!
{% endhint %}

You can enable **Auto-Provisioning of WorkSpaces** by adding users to an [Active Directory group](https://admin.nuvens.cloud/appendices/ad-group-mapping) and configuring WorkSpaces Manager to read users from that group. To start, select **Add Profile**.

![](https://2854239078-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FxEJOGCAr5O8d9q95spJy%2Fuploads%2FwHo6IG8O4JxEorMwlVwS%2FAP%20\(1\).png?alt=media\&token=6dfd7d52-1132-482d-8f87-cc744e8ed90c)

{% hint style="info" %}
When Auto-Provision is enabled, the service will poll the Active Directory groups every **15 minutes** for new members.
{% endhint %}

The following information is required to create and configure an **Auto-Provision (AP) Profile**:

* **AD Group Name** – Specify the Active Directory group used for provisioning.
* **Account** – Select the AWS account where the WorkSpaces will be created (if multiple accounts are configured).
* **Region** – Select the AWS Region for the WorkSpaces.
* **Directory** – Select the WorkSpaces directory (AWS Directory Services or AD Connector).
* **Bundle** – Select the WorkSpaces bundle.
* **Running Mode** – Select the desired running mode.
* **Encryption** – Enable or disable root and user volume encryption.
* **Directories** – Enable or Disable the use of multiple directories. When enabled, Auto-Provision selects the directory with the highest available IP capacity when creating a WorkSpace.
* **Termination** – Enable or disable termination on group removal.
* **Tags** – Select the profile tags to be automatically applied.
* [Temporary Provisioning](https://admin.nuvens.cloud/appendices/temporary-workspaces): Define how many days the WorkSpace remains active before automatic termination, and how many days prior to termination users are notified.

{% hint style="warning" %}
Removing a user from an AD group **does not automatically terminate** the WorkSpace by default. Termination on group removal will only occur if the **Terminate on Group Removal** option is enabled *and* the WorkSpace has the **`Automation - Managed`** tag applied.
{% endhint %}

{% hint style="danger" %}
You will only be allowed to add "Fixed Tags" in Profile Tags once you’ve saved the Auto-Provision profile. If you go back to edit this profile, you can then add the Fixed Tags.
{% endhint %}

![](https://2854239078-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FxEJOGCAr5O8d9q95spJy%2Fuploads%2FedyAe59W38vaBPkUnNCN%2FScreenshot%202026-03-23%20113957.png?alt=media\&token=b5a7a8ba-b41f-4cdd-b1b7-c9806ba7b309)

WSM uses **Directory Selection Behaviour**, where when **Use Multiple Directories** is enabled, you can select one or more directories for provisioning. The service then evaluates the selected directories based on available IP capacity and chooses the most suitable option. If provisioning fails due to capacity constraints, it automatically retries using the next best directory, and all attempts are logged for audit and troubleshooting purposes.