This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Removing a dynamic role ends up deleting AD account.

We have dynamic roles that assign AD groups to users. We have several users that no longer need to be in these roles. I have created a new dynamic role with only the AD group "domain users". When I move people to the new dynamic role it deletes the ADSaccount. We are migrating 3000 users to a new system that will handle AD group membership and I do not want the AD sync to add in the AD groups from our dynamic group back to these users. Any suggestions?

Markus Weiss-Ehlers over 8 years ago

Which version are you using?
Cancel
Up 0 Down

Cancel
lsteuer99 over 8 years ago

6.1.2. I found the problem. We have a custom table that also stores the roles and ties to the UNSAccountB table. It needed the UID_ for the role from the custom role table stored on the user's UNSAccountB row. Once I added the role to our custom table everything worked.
Cancel
Up 0 Down

Cancel