Hi,

Our customer wants to implement a functionality in One Identity that would remove all entitlements except one from the Azure AD accounts of users who are in the leaver process and are disabled. The accounts currently have account definitions assigned…

Hi all,

I created an Account definition and forgot to uncheck 'Retain account definition assignment if permanently disabled'. Is there a way to removed that check box? It is greyed out. I have 1000 people with the assignment and cannot recreate it because…

Hello,

We have been seeing some Person's getting removed from an Account Definition by SA. I'm not certain why these have occurred. Nothing fired any of the retain account definition options. Can someone tell me how I can determine why this is happening…

Hello,

I need to create account definitions for a Sharepoint connector that links the account to a specific site.

My question is: we have so many site collections (30+), should I create manually an account definition for each site or is there a way to create…

Hi.

I have partners employees with UID_FirmPartner field.

I need that accounts for this employees creates in the OU with the same name of FirmPartner.

I had created account definition for this target system (LDAP). But there is not IT Operating Data for…

I have a custom target system, and an account definition assigned to it.

I have many users who have the account definition assigned via business roles without issue.

Using Manager, I assigned the account definition directly to two people.

For the first…

Hello,

I have an account definition that is not used for all and assigned only when needed. When we get the request for the assignments it may come in bulks. Does anyone know of a way to assign them in bulk through manager? I cannot see a way and don…

Good evening to everyone,

I have a question and I would like to understand if it's possible to do it or not.

I have multiple employees  with two account definition : ad account and adm ad account,

I would like to log in IT SHOP with employee credentials…

Hi fellow experts,

I hope everyone is save and healthy.

I've configured an account definition for a custom target system and mapped it with a business role (assigned using a dynamic rule). So the creation of UNSAccountB is happening and using the generic…

Hi Experts,

I tried to update few attributes in AD for the user like firstname, lastname, description, department. I have noticed that with only department change the account definition is again checked for the user and accordingly the container of the…

hi,

We have upgraded One IM from 8.0 to 8.0.2. But, events for assigning account definition, mails and few others are not getting triggered. What can be the cause? Please suggest.

Hi.

I have an employee that have three account definitions assigned and one resource assigned through dynamic roles. But when the person is marked as outstanding the definitions and resources are still there (they're present in PersonHasTSBDefinition…

Account Definition is not automatically getting assigned to user.I have AD Account definition called (US-AccountResource).It will assigned to user by automatically once user has us location.But it is not working properly.

In the configuration ,i could…

Hello Experts,

ADS_ADSDomain_SearchandCreate_Person_PostSync  is frozen is with below error

Error messages : 

ErrorMessages = (2018-11-07 18:33:58.230) [810222] Error executing script 'ADS_PersonAuto_Mapping_ADSAccount'.
[System.Exception] Error…

I have a Person Object .We have created a manual AD account at one domain and connected to this account.

But we have automatically configured account definition and Resource.According to user location ,this means it has to create AD in Different domain…

Hi,

I want to assign account definition (account definition is created to provision account in AD) to a user but when I assign account definition directly to a user, only one DBQueue process is coming up in Job queue info and not the processes which follows…

Hi,

I want to assign account definition (account definition is created to provision account in AD) to a user but when I assign account definition directly to a user, only one DBQueue process is coming up in Job queue info and not the processes which follows…

Hey Folks,

I am having a weird issue with template updates on ADSaccount CN created as part of an account definition.

Breakdown is as follows:

• Account Definition SO is created.
• Manage level SO FM is created.
• Account Definition is assigned to Business…

Hola,

Version: OIM 7.1

So I have successfully tested AD user account creation against account definitions, and have assigned these account definitions to categories that match specific groups, and everything functions as expected..

One thing that I find…

Ok so we have a number of Account Definitions for different classes of accounts, standard and elevated accounts.

The same is defined for groups. In which case, only elevated accounts should be allowed to be added to elevated groups. Similarly for regular…

Hello,

We have synced over AD accounts into OIM and linked them to employees, but they do not have account definitions assigned. We are setting up a birthright business role that includes all employees and want to assign the AD account definition to it…