Assignment and promotion of AD Group

l tonelli Did you find a solution for this? I am looking at the same use case and thinking of something like this (untested)

1. Create the ADSAccount and automatically assign the new ADSGroup and Account Definition through primary business role
2. A process triggered by Insert on ADSAccount that first waits for ObjectGUID and group membership, then set UID_ADSGroupPrimary to the new group, and removes the old primary group from ADSAccountInADSGroup

Are

Hi Are,

yes you are right. In practice, you first have to assign the group as a standard membership, then you select it as primary. The one that was primary becomes a normal membership and now you can delete it.

Lucrezia

Hi Are,

yes you are right. In practice, you first have to assign the group as a standard membership, then you select it as primary. The one that was primary becomes a normal membership and now you can delete it.

Lucrezia