Device information can come from an AD server, Windows workgroup, or manual FortiClient connection. You can create groups to organize endpoints.