Assign Security Groups to Business Role

Hello,

             IsGroupAccount enabled in user's ADSAccount?  If not enable the attribute from manager, then system will assign group in AD.  You can assign this for all users, in AccountDefinition configuration.

thanks,

Jaipal.

Hello,

             IsGroupAccount enabled in user's ADSAccount?  If not enable the attribute from manager, then system will assign group in AD.  You can assign this for all users, in AccountDefinition configuration.

thanks,

Jaipal.

Hi Jaipal,

Thank you for your reply. After check the option "Groups can be inherited", the security group successfully updated for the AD account.

May I know how to configure this in AccountDefinition? By the way, my identity manager version is 8.0.1. Thank you for your help.

Best Regards,

Ban Jing

Hi Jaipal,

Just to update, after I configured default value for AD Account Definition, it works now. Thanks a lot for your help.

Regards,

Ban Jing

Just wanted to add the link to the knowledge base article that handles this topic. https://support.oneidentity.com/de-de/identity-manager/kb/187244/employee-s-adsaccount-does-not-inherit-group-memberships

Hi Jaipal,

I hope this can be achievable via template for   IsGroupAccount in Ads table.

Value = true

Regards

Baji

If your accounts are controlled by an account definition you can just set the value for IsGroupAccount via the IT operating data. That's the preferred way of doing it.

Your template would work as well, but then every account would have the flag enabled which would reduce your options to control the inheritance for different account or identity types.