Hi,
We generate Roles from a DDBB collector with its members but not all the members are in this database.
We need to add members to the roles created from an existing attribute in the Active Directory but we can not configure an Active Directory Role collector with the User To Role Membership option (Filter for users and extract role memberships from user attributes). Is there a guide or document with a more detailed description that can help us?
We have tried to generate rules with the user attribute but a request is generated with activities to manually add the user to the role. It seems that if the role is generated from a collector, members can not be assigned automatically.
Thanks
I'm afraid there is no way to aggregate members from different data sources within the product, but I'm a bit confused on the architectural side or the use case in general. Correct me if I'm wrong
As for your last point, yes if a Role is collected then we assume everything should come from the source of collection (members, entitlements). By submitting a change request to add a new member, we are expecting someone (manually) or some process (AFX?) to fulfil the change on your target system then we would expect to collect the change back using the role collector to complete the request.