Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

Remove manager from AD account on Termination

bhushan1
New Contributor III
New Contributor III

Hi Team,

We are trying to remove manager in AD when user is terminated.
We have tried below attributes in json:
"manager": ""
Error:LDAP: error code 21 - 00000057: LdapErr: DSID-0C0910C0, comment: Error in attribute conversion operation, data 0, v3839

"manager": NULL
Error: AD - Malformed 'manager' attribute

Has anyone come across this usecase earlier?

Thanks,
Bhushan

2 REPLIES 2

stalluri
Valued Contributor II
Valued Contributor II

@bhushan1 
Make sure you escape the slash on the manager.

Example: 

"manager": "${managerAccount?.accountID}"

"manager": "${managerAccount.accountID}"

"manager": "${managerAccount!=null ? managerAccount.accountID: ''}"

"manager": "${managerAccount!=null ? managerAccount.comments: ''}"

skip the characters
"manager": "${managerAccount.accountID?.replace('\\', '\\\\')?.replace('/', '\\/')}"


If it is still failing please check the permissions on the AD side.


Best Regards,
Sam Talluri
If you find this a helpful response, kindly consider selecting Accept As Solution and clicking on the kudos button.

bhushan1
New Contributor III
New Contributor III

Hi @stalluri,

Thanks for your response.
We want to remove manager when the user is terminated. The syntax shared will add the manager right?

Thanks,
Bhushan