Click HERE to see how Saviynt Intelligence is transforming the industry. |
09/05/2024 06:36 AM - edited 09/05/2024 07:16 AM
Hi Experts,
We have ADSI connection configured,
Basically user provisioning to AD is based on manager's primary account's DN-
If a user' s manager has multiple AD primary accounts, how can we get the particular primary account of manager using managerAccount object in createAccount json?
please provide your inputs on this.
09/05/2024 06:58 AM - edited 09/05/2024 06:59 AM
Hi @saima you can't get it directly.. as a workaround you can do for primary account add account type as primary the when you fetch via manager account it should pick that.
Or 2nd option via dynamic attribute.
09/05/2024 07:11 AM
${usersManagerObj?.username} |
https://docs.saviyntcloud.com/bundle/EIC-Connectors/page/Content/Binding-Variables-for-Provisioning-... |
09/05/2024 07:15 AM - edited 09/05/2024 07:16 AM
Hi Rushikesh,
We want to get the primary AD account of manager during AD provisioning. Manager has 2-3 normal AD accounts, where saviynt is not able to detect the account to be used for user's provisioning.
As user's provisioning is based on manager's AD account OU.
09/05/2024 07:16 AM
what is attribute to identify its primary account ?
09/05/2024 07:18 AM - edited 09/05/2024 07:18 AM
we don't have a attribute to identify but we have a base OU, can we make use of managerAccount object anyhow? to get the primary account?
09/05/2024 07:21 AM
@saima store primary account OU or DN in users manager profile.
If you can't identify you won't be able to get the right value ..
Or use dynamic attribute as stated above.
09/05/2024 07:22 AM
even if we make use of managerAccount , You need identifier to identify which account to use
09/05/2024 07:44 AM
Hi NM and Rushikesh,
If we somehow identify primary account by populating AccountType as Primary, how we can ensure managerAccount will always pick the primary account?
or is there any expression to get the primary account from manager and get it on some random customproperty?
09/05/2024 07:47 AM
You need to write logic based on customproperty where you will store
09/05/2024 07:52 AM
ok also - If we somehow identify primary account by populating AccountType as Primary, how we can ensure managerAccount will always pick the primary account?
09/05/2024 08:01 AM
You can define Account Type = Primary Account under Endpoint
09/05/2024 09:12 AM
@saima
We are using the Account Type attribute and populating the value for all the primary accounts as Primary.
Leave it blank for secondary and service accounts
In the Endpoint we will select this as below.
At the time of provisioning it will only pick the primary account and provision the user_account.