Active Directory - Account Aggregation - Can we put search filter to bring only some set of account

[IAM_99]

Hi Team,

AD Account Aggregation -  can we put search filter to bring only one account ?

We have 80K records - its taking 1 hours to complete , is there way we can make it quick ?

[rushikeshvartak]

You can do refer

https://confluence.atlassian.com/kb/how-to-write-ldap-search-filters-792496933.html

[IAM_99]

If we put (samaccountname=user1)  in AD Connection, and run AD Import , It will set status for all others are suspend from import source.

[Sivagami]

You can try configuring incremental import for AD reconciliation and run full import weekly.

https://saviynt.freshdesk.com/support/solutions/articles/43000615764-active-directory-ad-connector-g...

[IAM_99]

Understood, we have configured full and incremental both.

am trying to find a quick way to pull one/two accounts  as our incremental import also run for 25 minutes.

[rushikeshvartak]

What’s problem statement why u want to pull certain records 

if your concerns is account suspension then change threshold limit to 1

[IAM_99]

In production for debugging purpose, if we want to Import 1or 2  account quickly ( as Import job runs 25-45 minutes even incremental also , dont want to wait that long) is there way for this ?

[rushikeshvartak]

No

[sk]

One way you can achieve it is stop the full import and modify the connection object filter to include samaccountname filter and then run the incremental import. But since you mentioned this is for PROD. I wouldn't suggest this solution.

[IAM_99]

if we put one samaccountname in the filter , Will it cause all other accounts status to "Suspend from Import Service' ?

[rushikeshvartak]

Based on status threshold config limit

[sk]

No it will not, SFIS will only happen through Full import. Incremental import by functionality itself will bring only records created or modified after the value in the whenChanged attribute of Active Directory are considered for import.