You must use an identity template (or an account DN) to uniquely identify every user and group in your enterprise.
DNs display on the following Waveset User interface pages:
Resources
Distinguished Name Template
Edit Schema
For more information about identity templates, see Identity Template.