Assign groups AD when it create Account AD

I need assign a group Active Directory when it create la Account AD.

I have a Account Definition by business Roles, therefore, if I assing a business Role to a employee, it create account AD.

I have review the dynamic role for assign a business role and this business role have assing the group Active Directory, but I don't know how I fill the dynamic role for it assing the business role when it create account

Is it possible?

Parents
  • One Solution:

    Dynamic role -> SQL -> (Exists one Entry in ADAccount referenced to the person)

    EXISTS ( SELECT 1 FROM  (SELECT UID_Person FROM ADSAccount WHERE 1 = 1) as X  WHERE X.UID_Person = Person.UID_Person  ) 

    Result:

    All Person with a ADAccount will get this right.

    Second Solution

    Assign the Business Role to TSBAccountDef for the specific AD Account (nor dynamic role calculation is needed).

    As long all account have this birth right, this is preferred solution, in the other hand: rules with exceptions, take the first solution.

    With dynamic role also you can define the the right is removed if account is disabled.

Reply
  • One Solution:

    Dynamic role -> SQL -> (Exists one Entry in ADAccount referenced to the person)

    EXISTS ( SELECT 1 FROM  (SELECT UID_Person FROM ADSAccount WHERE 1 = 1) as X  WHERE X.UID_Person = Person.UID_Person  ) 

    Result:

    All Person with a ADAccount will get this right.

    Second Solution

    Assign the Business Role to TSBAccountDef for the specific AD Account (nor dynamic role calculation is needed).

    As long all account have this birth right, this is preferred solution, in the other hand: rules with exceptions, take the first solution.

    With dynamic role also you can define the the right is removed if account is disabled.

Children
No Data