• Adding to AD Group when Employee is disabled

    Hello 

    I have a little problem with active directory group assignment.

    I want the disable users group to be added to the active directory account when the user is disabled.

    I also want it to be removed from all other groups except this group.

    What should…

  • Defer ADSAccountInADSGroup for terminated employees

    Hello,

    Does anyone have a suggestion on how to defer the removal of groups when a employee is terminated?

    I just need to maintain group membership for 2-3 days then have them removed. Right now I have ADSGroup update ignoring some specific groups and…

  • what would be the best way to remove all the ads group membership after seven days of termination

    Hi Experts 

    I have a requirement to remove all the ADS groups membership assigned outside of Identity Manager after seven days of termination. 

    I also need to move the OU and put in a archive group at the same time. What is the best possible way I can accomplish…

  • AD group role based assignment

    I tried to implement business role based AD group assignment via One IDM.

    Though users are getting added, users who are no longer having the role are not being removed from the AD group in One IDM.

  • iden

    what is the importance of  - XIsInEffect   - in table  ADSAccountInADSGroup.I could see that ,some user doesn't have any  default groups.When i check in this table ADSAccountInADSGroup,i could see that the XIsInEffect   value is "False".

    But some…

  • ADSAccountInADSGroup inconsistency

    Hi All

    We know some ADAccounts are not in some ADSGroups but anyway the flag xmarkedfordeletion is =0.

    Groups are inherited from business roles and XOrigin attributes shows that (2, or 3 depends on case, inherited anyway).

    We've launched many times initial…