Account Attribute update on Enable/Disable Account Operation

[Community_User]

Originally posted on May 6 2020 at 18:51 UTC

Hello Team,

Would like to know if there is any way to modify account attributes on enable or disable account operation. This is needed because when we perform account disable operation although the user is moved to different OU (Disabled uses) in AD, it still shows the old OU (User Accts)/distinguished name value in SSM account attributes. I know that upon target reconciliation data will be in sync however when operation is performed thru SSM there should be an option to reflect those values on account attributes as well.

Is this feature already available?

Thanks,

Pallavi

[Community_User]

Originally posted on May 6 2020 at 18:59 UTC

Hi Pallavi,

AccountID is the account attribute which is recommended to be mapped with distinguishedName in ACCOUNT_ATTRIBUTE in AD connection. AccountID does get updated once the account is disabled and moved to a different OU.

[Community_User]

Originally posted on May 7 2020 at 01:46 UTC

I have accountId mapped to DN however there is comments field which is also mapped to DN and its not updated on enable/disable operation. So whenever you go to accounts and see the records comments will still show the old dn value. Is there any option to update account attributes as a part of enable or disable JSON. I tried but it did not work.

Thanks,

Pallavi

[Community_User]

Originally posted on May 7 2020 at 08:28 UTC

Hi Pallavi,

Greetings!!

ACCOUNTID Update is only supported post enable/disable operation.

If you want to update other account attributes, you could schedule Incremental Account import after a certain defined duration.

Thanks & Regards,

Anand Kumar Jha

[Community_User]

Originally posted on May 7 2020 at 12:11 UTC

Thanks Anand for your reply.

Can we consider this as a feature request for future releases?

Thanks,

Pallavi

[Community_User · Accepted solution]

Originally posted on May 7 2020 at 12:43 UTC

Hi Pallavi,

Greetings!!

Sure!! You could raise this as a feature request.

Thanks & Regards,

Anand Kumar Jha