and more in a single search tool across platforms. Read the announcement here. |
12/14/2023 08:13 AM
Hello, I am experiencing an issue with Saviynt AD Connector setting a user's Admin account as the manager of their direct reports instead of their Primary AD Account. We have the AD connector setup to set manager using the below line.
"manager": "${managerAccount?.comments}"
We also have the "Primary Account Type" set in the AD endpoint. According to the below forum post, this should ensure that the "Primary Account Type" set in the endpoint is used to also set the manager of a user in Active Directory.
Did You Know? How and why you set up Primary Accou... - Saviynt Forums - 3148
So to recap, we have users with a "Regular" AD account and an "Admin" AD account in the same AD domain. Both of those accounts are correlated with their Saviynt User object. When they are a manager, their "Admin" AD account is being set as a manager in AD for their direct reports instead of the "Regular" AD account.
12/14/2023 11:59 PM
12/15/2023 06:34 AM
The account type of the manager's normal AD account is "Regular" and the account type of the manager's admin account is "Admin". These account types are imported from AD employee type field into account type on Saviynt account object. They are all tagged correctly and we already successfully use these account types in our AD connector logic to handle "Regular" and "Admin" accounts differently in update account and remove account scenarios.