Active Directory Synchronization

Hi Priya,

for this purpose we have the script "VI_PersonAuto_ADS".

Normally this script will be executed automatically by different processes, example: "VI_ADS/EX2K_ADSAccount_Insert/Update (Fullsync)".

This process runs everytime when a new AD account was created/updated during a sync.

The 1st step of this process ("Search and Create Person for Account (Fullsync)") executes the mentioned script and searches/creates a person for this account and assigns the person with the account.

The behavior depends on the config parm "TargetSystem\ADS\PersonAutoFullSync".

I hope these information points you in the right direction.

Best regards,

Steffen

Hi Steffen,

Thanks. I could successfully link the accounts with the above said configuration parameter set. However the accounts are linked in 'Unmanaged' mode. Could you let me know how I could link the accounts in a fully managed mode?

Thanks,

Priya

Hi Priya,

that's dangerous.

The primary object in Q1IM is the person.

Unmanaged accounts doesn't get any properties from the linked person.

Full managed accounts gets a lot of properties from the person.

When you change the managelevel from 0 to 1 the account will be changed in nearly every case.

You could get changes like these:

- change of the login name

- change of the location of the home directory

- change of the properties for the remote access

- ...

That's why it's not recommended to change EXISTING accounts from unmanaged to full managed automatically via a process.

You can do this manually - in this case you have an overview of the changes.

Normally the exisiting accounts stay on "unmanaged" and only new created accounts (by processes in Q1IM) will be "full managed".

So far the suggestions.

Now I come to the information how you could do it even so.

As I told you the creation/assignement of the persons will be done by the script "VI_PersonAuto_ADS".

This script is an overrideable script.

That means you can write a custom script (as overrides script) with the same code for now.

This code can be modified to implement the needed changes.

For instance you can modifiy this line in the script to use another manage level for the account:

Acc("ManageLevel").NewValue = 0

But I wouldn't do it ...

Best regards,

Steffen

Hi Steffen,

Thanks.. the information was helpful..

Hi Steffen,

On changing the employee assignment criteria to PersonnelNumber = employeeID from centraluser account = samaccoutname, I executed the synchronization..

I observe that the fields Employee, and Managed Level in the user account information in Manager tool have disappeared.. Has the employee assignment criteria got anything to do with this?

Thanks,

Priya

Hi Priya,

connected accounts will never be disconnected from the persons by a sync or by the processes for the assignment of the employees to the accounts.

I think there is no relation between your mentioned change and the disappearance of the assignments.

Steffen