Hello Experts,
We have an issue in disabling admin accounts in an domain from IDM end.
After account gets disabled in IDM(one identity/ADSaccount table) AJG_ADS_ADSAccount_Update/(De-)activate job will be triggered to carry update to native AD but its getting failed with error.
(2018-11-05 06:39:34.473) [1777018] Error executing synchronization project (Active Directory Domain (XYX.COM))'s workflow (Provisioning).
[1777124] Error executing projection step (user) of projection configuration (Provisioning (Provisioning)).
[1777219] Error executing synchronization step (user)!
[1777004] Method (Update object (Update)) could not be executed successfully.
[2226012] Error committing object CN=A-MaryBeth Reis,OU=XXX Administration Accounts,OU=XXXTechnical Management,DC=xyx-rps,DC=xxxx,DC=com.(Error: Error committing object 9ee0a88d-05d1-4699-8dd0-02f506be78a6.(Error: Access is denied.
Object not committed successfully. Retrying using single property commit.
Property userAccountControl will be set.
Access is denied.
Property vrtparentDn will be set.
Access is denied.
Can some one provide me an insight of how this permission can be sorted out.
BR
Baji
