Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

Make attributes NULL in DISABLE ACCOUNT JSON - Active Directory

PratithShetty
New Contributor III
New Contributor III

Hi,

I have a usecase to make manager field of an AD account on termination as null. I tried the below but no luck. If anyone has worked on it, please help

 

DISABLE ACCOUNT JSON

{
"moveUsertoOU": "OU=Disabled Users,DC=prim,DC=com",
"userAccountControl": "514",
"manager": ""
}

{
"moveUsertoOU": "OU=Disabled Users,DC=prim,DC=com",
"userAccountControl": "514",
"AFTERMOVEACTIONS": {
"manager": ""
}
}

4 REPLIES 4

Raghu
All-Star
All-Star

@PratithShetty  try below

"manager": "${if(user?.manager!=null ) {''} else {''}}"


Thanks,
Raghu
If this reply answered your question, Please Accept As Solution and hit Kudos.

PratithShetty
New Contributor III
New Contributor III

@Raghu No Luck. gives me Attribute conversion exception

rushikeshvartak
All-Star
All-Star

{
"moveUsertoOU": "OU=Disabled Users,DC=prim,DC=com",
"userAccountControl": "514",
"manager": ""
}

{
"moveUsertoOU": "OU=Disabled Users,DC=prim,DC=com",
"userAccountControl": "514",
"AFTERMOVEACTIONS": {
"manager": null
}
}


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

No Luck. Nothing works. Maybe it is just the Manager attribute as it expects a DN always. 

For a workaround i am clearing it using Powershell script.