This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Linking "Normal" accounts to "Admin" Accounts

Hi,

I'd like to know if it is possible to link "Normal" user accounts to their equivalent "Admin" accounts, so when the "Normal" account is deprovisioned  that the "Admin" account associated with that user is also automatically deprovisioned.

If possible also when the manager of the "Normal" account changes that also the manager of the "Admin" account is updated.

 

Thanks.

 

Sander.

Parents
  • Hi,
    we've implemented such.
    Its basically a multivalue DN attribute in the User itself and a BackLink Attribute in the Admin.
    Means multiple Admin Accounts could be referenced to one "OfficeUser" Account
    When Searching the user you get all of its linked Accounts back to disable or deprovision those accounts once it happens to the Office User.
    The BackLink (BL) natur of the attribute will "follow" the OfficeUser if its DN changes due to rename or move actions.

    Do youself a favour and check the manager/managedBy attributes. As you mentioned - its the same story.
Reply
  • Hi,
    we've implemented such.
    Its basically a multivalue DN attribute in the User itself and a BackLink Attribute in the Admin.
    Means multiple Admin Accounts could be referenced to one "OfficeUser" Account
    When Searching the user you get all of its linked Accounts back to disable or deprovision those accounts once it happens to the Office User.
    The BackLink (BL) natur of the attribute will "follow" the OfficeUser if its DN changes due to rename or move actions.

    Do youself a favour and check the manager/managedBy attributes. As you mentioned - its the same story.
Children
No Data