Stop the publishing of AD Groups to IT Shop on Fullsync
After upgrading from 5.1.2 to 6.1.2, Identity Manager automatically creates IT Shop items (service items, categories, products, etc.) for every AD Group and attaches them to the AD Group shelf. This occurs when the first full sync is run.
Is there a way to disable that?
This is the default behaviour. The process step "Publish ADSGroups to ITShop" automatically creates an AccProduct for each ADSGroup. It assigns ADSGroups to the default ITShop shelf "Active Directory Groups" in shop "Identity & Access Lifecycle".
"Publish ADSGroups to ITShop" is a step of "VI_ADS_Domain_Fullsync", thus the first full sync in any environment will see this taking place.
The Fullsync process (VI_ADS_Domain_Fullsync) has a step (Publish ADSGroups to ITShop) which executes a script that publishes all of the AD Groups to the IT Shop.
This can be accomplished by copying the default "VI_ADS_Domain_Fullsync" process and then deleting the step (the step cannot be deleted in the default process chain).