Hello,
We have synced over AD accounts into OIM and linked them to employees, but they do not have account definitions assigned. We are setting up a birthright business role that includes all employees and want to assign the AD account definition to it so that all employees get provisioned AD accounts going forward. We also want employee record updates to get propagated to AD, so the AD account definition is full-managed.
My question is how can we assign the full-managed AD account definition to the birthright business role initially without triggering updates to the existing AD accounts? If we assign it right now, the templates get triggered for the existing accounts and starts updating thins like the OU of the account.
Thanks in advance,
Febin