I thought this would be simple and I still think it is but Im missing
Ok the story is IDM3 running on SLES 9. Layout is an IDM vault connected
to an MAD and a production eDir tree. All works fine and dandy sync'ing
all directions properly etc..

What I want to do is if a user is made a member of a group in the
production eDir tree then IDM is to add an attribute to the users account
in the vault tree of blah (a simple string).
This attribute I will use to help decide entitlements in AD.

Any help apreciated as I'm sure I'm doing something silly