The Indeed AM 7 system supports working with users of:
- A separate organization unit (OU)
- Whole domain
You have to create a service account and give it read access to the required user directory in order for the system to work with the user directory.
By default, all domain users have read access to all domain objects, unless the security policy defines the opposite.