Delete an Azure AD user
You can use the Active Roles Web Interface to delete a user for logon to Azure.
To delete an Azure AD user
- On the Active Roles Web interface Navigation bar, click Directory Management.
- On the Views tab in the Browse pane, click Active Directory.
The list of Active Directory domains is displayed.
- Click the specific domain, Container or the Organizational Unit, and then the specific user to be deleted.
- In the Command pane, click Delete.
The account is deleted.
- Deleting a user is an irreversible operation. A new user with the same name as a deleted user does not automatically assume the permissions and memberships of the deleted account. For this reason, it is advisable to disable rather than delete accounts.
- In a hybrid environment, the user must be deleted in the on-premises AD first and then the changes must be synchronized with Azure AD. In case, the user is deleted in Azure AD first, the Active Roles web interface still displays the Azure properties link for the deleted user but with no information. Further modification of the Azure properties for the deleted user will not be valid.
Provisioning OneDrive for Azure AD users
Provisioning access to OneDrive for Azure AD users is controlled or restricted by creating a new provisioning policy and applying the policy to the Organizational Unit.
|NOTE: SharePoint Online Management Shell must be installed as part of the Active Roles as a prerequisite.|
To create and apply the new policy
- From the Active Roles Console, create a Policy Object. For instructions on creating a policy object, see the section Creating a Policy Object, in the Active Roles Administration Guide.
- In Active Roles Console, on the Policy to Configure page, select OneDrive Provisioning.
In the New Provisioning Policy Object Wizard | OneDrive folder Management page, enter the SharePoint Admin Url and the storage size, and click Next.
NOTE: If the policy conditions are not satisfied, such as an incorrect SharePoint Admin Url or a storage size that is not within the acceptable range, an error is displayed.
- In the Enforce Policy page, select the Organizational Unit (OU) on which the policy must be applied.
- Click Next.
- Click Finish.
- From the Web interface, create an Azure AD User, and assign a valid SharePoint Online license.
- After the user is created, the OneDrive provisioning process is performed in the background and after some time the process is completed.
- If the SharePoint Admin Url is incorrect then the OneDrive provisioning is not successful.
- For an existing Azure AD user, during modification of user properties:
- If OneDrive is not provisioned, then OneDrive provisioning is triggered.
- If OneDrive is provisioned, and any changes are made to the OneDrive provisioning policy, then the policy changes are applied on the user.
- To check the provisioning result, open Azure Properties window for the user from the Web interface, navigate to OneDrive tab.
On successful provisioning of the user, the OneDrive URL, the used storage size, and the total storage size are displayed.
|NOTE:The storage size indicated in the policy gets synchronized to the Azure AD user's OneDrive.|
Scheduled task to provision OneDrive for Azure AD users
Active Roles uses a scheduled task, Sync Azure OneDrive to provision OneDrive for:
- Azure AD users for whom OneDrive is not provisioned
- Azure AD users for whom the OneDrive provisioning was not successful.
The Sync Azure OneDrive is available in the Configuration | Server Configuration | Scheduled Tasks | Builtin container in the Active Roles console.
You can make changes to the task using the Schedule tab on the task's Properties dialog box
You can schedule the task to run daily, weekly, and so on, and set the start time and start date. You can also set the time after which, the task stops if it runs for more than the specified number of hours.
Hybrid User Management tasks using web interface
Active Roles web interface enables you to perform the following Hybrid management tasks for hybrid users: