Leveraging Intelligent Recommendations for Operational Transformation. AMS Partners click HERE | EMEA/APJ Partners click HERE |
03/27/2024 09:16 PM
We are trying to populate the managers attribute in AD via the create account JSON below.
Also, The users have two accounts for the same AD endpoint. Do we need to specify the specific account on the endpoint to populate the manager attribute in AD during account provisioning and if so how?
{
"accountExpires": "0",
"c": "${user.customproperty16}",
"employeenumber": "${user.username}",
"company": "${user.companyname}",
"department": "${user.departmentname}",
"userPrincipalName": "FIM${user.username}@test.ad",
"employeeType": "Test Account",
"employeeID": "${user.owner}",
"givenName": "${user.firstname}",
"displayName": "${user.lastname}",
"manager": "${managerAccount?.accountID}",
"description": "Test Account for ${user.lastname}, ${user.firstname}",
"userAccountControl": "514",
"mail": "${user.email}",
"objectClass": [
"top",
"person",
"organizationalPerson",
"user"
],
"title": "${user.title}",
"physicalDeliveryOfficeName": "${user.location}",
"sAMAccountName": "TEST${task.accountName}",
"sn": "${user.lastname}",
"info": "Created by Saviynt Tool",
"pwdLastSet": "0"
}
Solved! Go to Solution.
03/27/2024 09:21 PM
Please refer to the below post with similar issue.
Error in updating manager attribute in AD - Saviynt Forums - 31211
03/27/2024 09:26 PM
Thanks rushikeshvartak, We are not receiving an error. The account is created in AD but the manager attribute is not populated. The same applies for update account task that attempt to populate the manager attribute in AD.
03/27/2024 09:33 PM
what is account id of manager
${managerAccount.accountID.replace('\', '###UNESCAPEBACKSLASH###')}
03/27/2024 09:49 PM
The account id attribute is populated with the DN. So the managers account id would be their DN
Account ID:
i.e. CN=Test,OU=Users,OU=Management,DC=meto,DC=net
03/27/2024 09:52 PM
Can you explain what this sytax is doing and how to modify for my use case?
${managerAccount.accountID.replace('\', '###UNESCAPEBACKSLASH###')}
03/28/2024 07:12 AM
:
The purpose of this syntax seems to be escaping backslashes in the accountID string by replacing them with ###UNESCAPEBACKSLASH###.
03/28/2024 08:25 AM
Thank you rushikeshvartak, I dont think I need to replace backslash charachters in this particular use case. I simply need to select the correct manager.
03/27/2024 09:53 PM
try like below:
${managerAccount.accountID}
03/28/2024 08:42 AM
Thanks but this did not work. Error below using syntax you provided.
Provisioning Comments
03/28/2024 09:25 AM
what is account id of manager Provide screenshot
03/28/2024 09:48 AM
It is the DN of the users Active Directory account
03/28/2024 07:37 PM
Is it possible to show value
03/28/2024 11:03 PM
try this :
CN=Test,OU=Users,OU=Management,DC=meto,DC=net---> Test
"manager":"${manager==null?"":manager.username}"
04/04/2024 08:46 AM - edited 04/04/2024 08:47 AM
Along with Saviynt support we identified that the best approach was to disassociate the duplicate accounts with the users and run an update task to populate the manager attribute. This was not a syntax issue. Saviynt could not identify with proper account on the endpoint to pull the manager accountID from due to the duplicate accounts on the endpoint.
This resolved the issue