• Keep group membership after termination

    Hello experts,

    Can someone tell me if we can keep group membership of a group assigned by a business role after termination? We have the AD account deferred for 90 days after termination. 

    Thank you,

    Lu

  • Creating a report / Maximal member count of a Group (ADSGroup, AADGroup) in last month

    Hi there, is there an OOTB functionality to set a report of the historical group memberships?

    We have customers who receive a monthly invoice. The quantities are calculated based on the memberships in AD or AAD groups, specifically the maximum number from…

  • Active Directory Group management. Version 8.1.4

    Hi everybody,

    I am trying to configure Identity Manager in order to make some employees able to manage Active Directory Groups. I am using 8.1.4 version.

    If I assign "Active Directory" application role to an employee, he will be able to see all the list…

  • ADSAccountinADSGroup entries not getting provisioned to Target System Active Directory

    Hello All,

    We are managing a few AD group memberships in IT Shop. Now for few days our production DB ran into issue so we had to tune our DB and then performanceturned to normal.

    But any group membership requested and approved during that period is now…

  • AD Sync based on group membership assignment

    Hi Experts

    I am trying to achieve some sync task however not sure what is the best solution. the task is - 

    If any group membership missing in AD however the membership present in IAM, during the sync the action should be 

    • If the membership in Identity…
  • What is the way to add AD group membership to a disable person

    Hi 

    I have an requirement to assign two ads group to a disable person. 

    I have written a script to add the groupmembership (ADSAccountInADSGroup), It seems like it is not possible to add as user account is disable.

    It is complaining in xIsInEffect column…

  • How to find each job details in "DialoguDBQueue"

    I need to find what are jobs are executing in "DialogDBQueue".I could see that there are 10 task to process  in "Active Directory user account  membership in Active Directory groups" .How to find the details in that task like,for which user…

  • Why Outstandings AD objects are created in Dell one.What is the cause for creating object.

    we are using Dell one Idm and we have AD target.When i go to Manager tool->target synchronization;Active directory ,i can see many user and their AD groups .Why these user listed as Outstanding object.

    These user are member of respectice AD groups…

  • ADSAccountInADSGroup inconsistency

    Hi All

    We know some ADAccounts are not in some ADSGroups but anyway the flag xmarkedfordeletion is =0.

    Groups are inherited from business roles and XOrigin attributes shows that (2, or 3 depends on case, inherited anyway).

    We've launched many times initial…

  • How to re-trigger provisioning of AD groups including all members

    Hi,

     

    we have some inconsistency issues regarding AD group memberships, where we would like to simply re-provision individial ADSGroups in 7.1.1.

    However, we couldn't find a way to achieve this. For oustanding groups (missing in target system) there is…

  • RE: The object has pending M:N provisioning tasks

    Hi,

    your LDAP is configured to do single ad-hoc membership changes for the provisioning tasks. So for any membership change an entry will be recorded in DPRMembershipAction. These entries will be used by the ad-hoc provisioning steps in addition to the…