Solved

IDM4 format entitlements, are meant to be managed via Roles and Resources not the Entitlement Service Driver, they are trying to deprecate those.

You can use the GCVs in the AD driver to define the entitlement values as legacy.

The Parameter format, switch it to Legacy from IDM4.

How?  Nice to share, if you figure it out so others can benefit in the future. Meant to be a shared resource here, not personal support.

yes, i changed it to legacy for users and groups. and it works

Ho to setup entitlement in AD on AD user account for syncing to IDM ?

Geoffrey Carman said:

the Entitlement Service Driver, they are trying to deprecate those

I thought they changed their mind and decided to still support the ESD (not sure why, probably because of customers who only ever use IDM SE)

Can you elaborate please?  What have you tried?  What are you trying to accomplish?

Oh, I had not hear that.  But it makes sense.

Just to know how to set entitlements on AD accounts which should be synced to IDM. for IDM users I use it via gropup and it works fine. But I want to have possibilities to sync AD users (created in AD) to IDM and how to setuop obn these account entitlements. When I add users to the same group like users from IDM - it doe4sn't work