I need to add a validator (or condition?) to a workflow so that only the people with M, R or E in the Active Directory field "employee.type" can submit the ticket. Normally I would try to get the Active Directory gurus to create an AD group containing those people, which would automatically sync with Crowd and I would use the Crowd group in my validator. But I haven't been given much time to get this done and the AD people can be slow. Can I skip to the chase and create a validator (or condition...I'm never sure which I should use) that looks directly at a reporter's employee.type in active directory? Thanks for any advice.