• State Not Answered
  • Replies 6 replies
  • Subscribers 99 subscribers
  • Views 985 views
  • Users 0 members are here
Options
Related

Assignment and promotion of AD Group

l tonelli
over 1 year ago

Hello everyone,

Has someone ever automated the assignment of an AD group, and then the promotion of it to primary group?

I'm currently using OneIM 9.1.

Thank you so much for the support,

Lucrezia

Parents
  • 0 6 months ago

     Did you find a solution for this? I am looking at the same use case and thinking of something like this (untested)

    1. Create the ADSAccount and automatically assign the new ADSGroup and Account Definition through primary business role
    2. A process triggered by Insert on ADSAccount that first waits for ObjectGUID and group membership, then set UID_ADSGroupPrimary to the new group, and removes the old primary group from ADSAccountInADSGroup

    Are

  • 0 6 months ago in reply to Are Sandnes

    Hi Lucrezia,

    you may change the primary group membership of ADSAccount to any group where the ADSAccount is already member only. So the proposed process of Are should have a step 1a) add group membership to ADSAccount (new primary group)

    Having this in place you are allowd to change the FK UID_ADSGroupPrimary to the new group.

    Regards,

       Tino

Reply
  • 0 6 months ago in reply to Are Sandnes

    Hi Lucrezia,

    you may change the primary group membership of ADSAccount to any group where the ADSAccount is already member only. So the proposed process of Are should have a step 1a) add group membership to ADSAccount (new primary group)

    Having this in place you are allowd to change the FK UID_ADSGroupPrimary to the new group.

    Regards,

       Tino

Children
No Data