Hi
I wanted to confirm following w.r.t ADSI group management in Saviynt:
Do ADSI connector support nested groups - can we add a child / parent group while creating a Group from "Create ADSI Groups" screen?
While creating a group from "Create ADSI Groups" screen if we add a group owner then Saviynt updates it in AD's managedBy attribute or just stores it in Saviynt?
- If we add below configuration for "managedBy" in CREATEGROUPJSON but while creating a new group if we don't select a group owner then group creation also fails. Otherwise it works. what wrong with this configuration
"managedBy": "${ownerAccountListMap.get(allOwnerList.get(0)?.userkey.username)!=null && ownerAccountListMap.get(allOwnerList.get(0)?.userkey.username).size()>0?ownerAccountListMap.get(allOwnerList.get(0)?.userkey.username).get(0)?.name:null}"Working config for CREATEGROUPJSON in ADSI connector
{
"objects": [
{
"objectClasses": ["group"],
"baseDn": "${role.customproperty24}",
"attributes": {
"cn": "${role.displayname}",
"name": "${role.displayname}",
"samaccountname": "${role.displayname}",
"description": "${role.description}",
"displayName": "${role.displayname}",
"groupType": "${role?.customproperty21 == 'Security' && role?.customproperty22 == 'Global'?'-2147483646' : role?.customproperty21=='Security'&&role?.customproperty22=='Universal'?'-2147483640' : role?.customproperty21== 'Security'&&role?.customproperty22=='Domain Local' ? '-2147483644':role?.customproperty21=='Distribution'&&role?.customproperty22=='Global' ? '2':role?.customproperty21== 'Distribution'&&role?.customproperty22=='Universal'?'8':role?.customproperty21=='Distribution'&& role?.customproperty22=='Domain Local'?'4':''}"
}
}
]
}
