Dear Experts,
I have a use case for birth right Provisioning, where the AD Group has to be given to users with below condition.
Based on User's Attribute value coming from HR source (Level = 1 to 6) , AD Group = "XYZ " has to be given to User.
(Level = 7 to 12) : AD Group = "ABC" has to be given to User.
I don't find any condition to be given on user attribute on Rule page.
please suggest solution and approach fir this.
Regards,
Rajkiran Paul
Hi Boris,
we have already configured the approach.But this is not adding the Group at AD level, at RSA level it says the user's account is the member of this Role.
I have also configured a Rule to process the Users with respective Level, is it required or the Rule created by system is enough to trigger the change at AD level ?
I can see in the Automatic Rule Created the user filter is not present, can we modify the default Rule created by system to put the user filter ?
Regards,
Rajkiran
Role Set created
Role created under above Role set
Initially I did not add the Member to this Role
But at first time User Collection, it triggers role and add user (with Level=’10’)to that Role
Added Entitlement (AD Group) to this Role.
On First time Rule processing , It detected
The processes and CR is created to Add the role to the users and role group to the users Accounts.
I can see the CR is not completed and so change is not completed at the AD level But RSA level it shows user is mapped to role. But at AD level change has not been done. Please help us.
In the workflow you might want to add this condition and call provisioning. See if it helps.
Consider using roles with membership rule configuration.
Role #1 will contain Group A as entitlement
Role #2 will contain Group B as entitlement
Each role will have different membership rule to identify who should be a member