Hello,
I am looking for ideas on how to best allow other IT team members to "unmap" Active Directory accounts from various Synchronization Service Workflows. Currently only ARS Admins have the ability to do this but I would like to extend this access to a wider team with out granting them Admin access.
I was also thinking if there is a way to unmap an account through the management shell. If so, I could create a Virtual Attribute that kicks off the unmapping script when updated but I have not found a way to unmap through powershell or the sync service shell.
Any ideas would be welcome.
Thanks
Josh