Hola,
Ok so I have commandeered a custom property on the person to be a list item with (3) values:
- Employee
- Consultant
- AvisoryMember
I have created corresponding dynamic roles to match the above. Lets take employees as our example.
Couple of notes:
- Person records that have the value "Employee" in the custom property are appropriately assigned to the Dynamic Role called "Employees"
- Every employee gets:
- A standard user account definition (Works fine)
- A standard Mailbox (Standard user account as required account def. works fine as well)
- The "Employee" dynamic role has IT Operating Data assigned against the Standard user Account Definition that should assign the OU of the ADSAccount based on the value.
- Example: TSBAccountDef:Standard User Account (DOMAIN) - ADSAccount.UIDADSContainer
- The selected OU is "Employees"
- The selected OU is "Employees"
- Example: TSBAccountDef:Standard User Account (DOMAIN) - ADSAccount.UIDADSContainer
- The ADSAccount.UID_ADSContainer template is configured as follows:
'$FK(UID_Person).UID_Department$ '$FK(UID_Person).UID_Locality$ '$FK(UID_Person).UID_ProfitCenter$ #If ORG Then '$FK(UID_Person).UID_Org$ #End If If CBool(Connection.Variables.Get("FULLSYNC")) = False Then Select Case ($FK(UID_TSBBehavior).ITDataUsage:Int$) Case 0:'do not get data from employee Case -1:'fill property initially from the ITData of the employee If Not $[IsLoaded]:Bool$ Then Value = TSB_ITDataFromOrg($UID_Person$, $UID_TSBAccountDef$, Base.TableDef.Columns("UID_ADSContainer")) End If Case 1:'update property depending on ITData of the employee Value = TSB_ITDataFromOrg($UID_Person$, $UID_TSBAccountDef$, Base.TableDef.Columns("UID_ADSContainer")) End Select End If
The issue is that while the dynamic role assignments work great, the corresponding ADSAccount does not move into the OU. I presume that I am missing something as this seems to be a rather straight forward use case.
What am I doing wrong here?
Thanks!