Control custom target system group through AD group

Question

I have a custom target system whose groups we would like to manage through AD. The custom target system is already script synchronized (so CCC_UnsAccountBInUnsGroupB_<name>_Add and CCC_UnsAccountBInUnsGroupB_<name>_Del are already implemented).

Is it possible to set up one identity so that adding/removing members to an AD group would also trigger an add/remove from a custom target system group?

Troy Grandy · Accepted Answer

You could use a business role and set a dynamic role to be based off of the membership of said ADSGroup. Then add the UNSGroupB to the business role, this way when the user is added to the business role the UNSGroupB is assigned to the end user. 
 If the user is no longer apart of the ADSGroup then they will be removed from the business role and hence the UNSGroupB will be removed as well.

Control custom target system group through AD group

Top Replies