Announcing the Saviynt Knowledge Exchange unifying the Saviynt forums, documentation, training,
and more in a single search tool across platforms. Read the announcement here.

Remove manager from AD account on Termination

bhushan1
New Contributor III
New Contributor III

Hi Team,

We are trying to remove manager in AD when user is terminated.
We have tried below attributes in json:
"manager": ""
Error:LDAP: error code 21 - 00000057: LdapErr: DSID-0C0910C0, comment: Error in attribute conversion operation, data 0, v3839

"manager": NULL
Error: AD - Malformed 'manager' attribute

Has anyone come across this usecase earlier?

Thanks,
Bhushan

2 REPLIES 2

stalluri
Regular Contributor II
Regular Contributor II

@bhushan1 
Make sure you escape the slash on the manager.

Example: 

"manager": "${managerAccount?.accountID}"

"manager": "${managerAccount.accountID}"

"manager": "${managerAccount!=null ? managerAccount.accountID: ''}"

"manager": "${managerAccount!=null ? managerAccount.comments: ''}"

skip the characters
"manager": "${managerAccount.accountID?.replace('\\', '\\\\')?.replace('/', '\\/')}"


If it is still failing please check the permissions on the AD side.


Best Regards,
Sam Talluri
If you find this a helpful response, kindly consider selecting Accept As Solution and clicking on the kudos button.

bhushan1
New Contributor III
New Contributor III

Hi @stalluri,

Thanks for your response.
We want to remove manager when the user is terminated. The syntax shared will add the manager right?

Thanks,
Bhushan