FSMO Role Categorization and Functions

Flexible Single Master Operation (FSMO) roles are specialized tasks that only one domain controller in Active Directory can perform at a time. There are five FSMO roles, and each controls a specific function. The Schema Master manages all changes to the Active Directory schema, which defines the types of objects and their attributes. The Domain Naming Master handles adding or removing domains from the forest. The RID Master allocates pools of relative identifiers (RIDs) to each domain controller so they can create new security principals. The PDC Emulator acts as the authoritative time source for the domain and processes password changes and account lockouts first. The Infrastructure Master updates cross-domain object references, such as when a user in one domain is added to a group in another domain. In a hybrid topology that spans on-premises and cloud environments, placing these roles on the right domain controllers is critical for performance and reliability.