AD EnableAccount JSON

[PiyushRai]

Hi Team,

I am trying the below  AD enableAccount JSON but it is not working. I am seeing error

{

"USEDNFROMACCOUNT": "YES",

"MOVEDN": "YES",

"REMOVEGROUPS": "NO",

"DISABLEACCOUNTCHECKRULE":" {{'CN='+user.displayname.replaceAll(',','\\,')+',OU=Users,OU='+user.customproperty31+',OU='+user.customproperty32+',OU=AGIGATesting,DC=sus-test,DC=com'}}",

"ENABLEACCOUNTOU": "OU=AGIGATesting,DC=sus-test,DC=com",

"AFTERMOVEACTIONS": {

"userAccountControl": "512",

"userPassword": "${randomPassword}"

}

}

[SumathiSomala]

Hi @PiyushRai ,

Could you please share the error details and logs.

"DISABLEACCOUNTCHECKRULE" used when  "USEDNFROMACCOUNT" is set to "NO"

Please refer below link

Configuring the Integration for Provisioning and Deprovisioning Accounts (saviyntcloud.com)

[PiyushRai]

This is the error detail I get.

[SumathiSomala]

@PiyushRai Could you try below JSON and check if you are able to enable the account

{
"USEDNFROMACCOUNT": "YES",
"MOVEDN": "YES",
"REMOVEGROUPS": "NO",
"ENABLEACCOUNTOU": "OU=AGIGATesting,DC=sus-test,DC=com",
"AFTERMOVEACTIONS": {
"userAccountControl": "512"
}
}

[PiyushRai]

@SumathiSomala 

I'm getting this error when I'm using the above code

SAV-Error while enabling account,[LDAP: error code 53 - 0000052D: SvcErr: DSID-031A124C, problem 5003 (WILL_NOT_PERFORM), data 0 ]

[SumathiSomala]

@PiyushRai ,

Could you please share the error logs and how you are enabling the account through ARS or through User Update rules?

[PiyushRai]

@SumathiSomala 

[SumathiSomala]

@PiyushRai 

Could you please verify that the service account being used for the connection has sufficient privileges to perform CRUD operations in Active Directory (AD). It should have the necessary permissions for creating, modifying, and deleting user accounts.

Since logs showing OperationNotSupportedException.

And you are performing all operations using SSL port right?