How to clear manager field while disabling user AD account

[sbiswal]

Hello

The usecase is that while/right before user AD account is disabled, the manager field should become blank.

So far, we have used two codes in the disableaccountjson:

"manager":"${managerAccount.accountID}"

and

"manager":""

In the first case, we tried manually clearing the manager field and then trying to disable. However we got the error:

Error while Delete operation for account-TestYadavten in AD - LDAP: error code 32 - 00000525: NameErr: DSID-031A12A8, problem 2001 (NO_OBJECT), data 0, best match of: ''

In the second case as well we get an attribute conversion error - something along the lines that Cannot get id on null object.

Is there any way this can be possible to pass a blank value in the manager field while disabling? Or is this is Saviynt limitation and isnt supported in any version?

Thanks

[dgandhi]

Can you try this?

"manager": ""

Thanks

[sbiswal]

Hey Devang,

This gives following error:

Error while Delete operation for account-TestYadhavTw in AD - [LDAP: error code 21 - 00000057: LdapErr: DSID-0C090D7B, comment: Error in attribute conversion operation, data 0, v2580]

Is there anything else you can suggest to try out?

Thank you

[sk]

Try this

"manager":null

[sbiswal]

Hi,

Using null gives the following error:

Error while Delete operation for account-TestYadhavTw in AD - [LDAP: error code 21 - 00000057: LdapErr: DSID-0C090D7B, comment: Error in attribute conversion operation, data 0, v2580] Error while Delete operation for account-TestYadhavTw in AD - Malformed 'manager' attribute value

Any other code I can try out?

Thanks

[asp]

Have the same issue. Does anybody have a solution for this? We have tried -

"manager": ""

"manager": "''"

"manager" : NULL (and null)

"manager" : {}

[rajeshgaddam]

Any luck with this? What was the resolution?

[rajeshgaddam]

@asp Is the issue resolved for you now? What was the root cause and resolution?