Return
-
Title
HOW TO: Using a policy to replicate OU configuration to User objects -
Description
Provisioning policies can be used to replicate common attributes which are set at the Organizational Unit (OU) level, such as manager, onto User or Group accounts which are contained within that OU. -
Resolution
In a custom Policy:
- Add a Property Generation and Validation rule
- Choose Select and find the attribute, such as manager and then choose Next
- Check the box for Manager must be <value> (generates default value)
- Click on <click to add value> and then Configure
- Choose Add and then Parent OU Property
- Choose Select and find the managedBy attribute
- Choose OK
NOTE: It is possible to choose the the immediate parent container or a more distant parent. This is useful if the business unit or department has one or more standard, nested containers. For example, if Sales contains a Users and Groups OU, and the Users are in the Users OU, while management information is on the Sales OU.