Hi All,
Anyone configured Active Directory Role collector, please provide us screenshot of configuration.
Hi All,
Anyone configured Active Directory Role collector, please provide us screenshot of configuration.
Just curious as to why you would collect Roles from Active Directory? In other words what benefit are you looking to have over a normal Account/Group collector.
We want to collect Groups as Roles from Active Directory
As a one off? Or are you managing the groups in AD and want those changes to be reflected on the roles collected in G&L?
The first scenario I understand, the second scenario doesn't make sense at all. And in the first scenario, what are you planning to do with the groups that you now have converted to roles in G&L?
Edwin
We want to create Role Name same as group name and we want associate same group as entitlement in role, so user can request to Role instead of requesting Group directly, also we want to setup some membership rule to added directly users to roles.
I would strongly recommend to collect the groups as groups. Use roles to bundle groups / users and have those automatically assign using membership rules. This way you are using the roles the way they are intended to be used
Having a 1:1 relationship between role and groups will get you in trouble, especially when you grow the number of groups / roles
Edwin
If anyone has Active Directory Role collector document kindly share with me
I would strongly recommend to collect the groups as groups. Use roles to bundle groups / users and have those automatically assign using membership rules. This way you are using the roles the way they are intended to be used
Having a 1:1 relationship between role and groups will get you in trouble, especially when you grow the number of groups / roles
Edwin