User Account is not created in Active Directory (AD) when creating a new Identity via a Business role (4345261)

User Account is not created in Active Directory (AD) when creating a new Identity via a Business role

The requirement is to create an ADSAccount account whenever an Identity is assigned to a Business Role.

Currently, when a new Identity is created using Identity Manager, the account is not created in Active Directory (AD) when the Identity is assigned to a Business Role.

What are the required steps to create ADSAccounts using this method?

In order for Identities assigned to a Business Role to receive an associated ADSAccount object, an Account definition must exist for the relevant domain, and the account definition must be assigned to the Business Role (also, the Role class for the Business Role must allow for direct assignment of account definitions).  E.g.:

Ensure the role class allows for assignment of Identities, as well as Account definitions:

 

For more information on creating Account definitions please refer to the Administration Guide for Connecting to Active Directory, Creating an account definition.

When Identities are added to the Business Role, they will inherit the account resource, and an ADSAccount object will be created.