返回
-
标题
ActiveRoles: where is the "Deprovision" task for ADSAccounts? -
说明
In Identity Manager 6.1.x, when using the ActiveRoles Server provider, the task "Deprovision" was available in Manager for ADSAccounts.
In Identity Manager 7.0.1, this task is unavailable.
How can this feature be enabled? -
原因
This is due to a product defect, 25106:
The DialogObjects (DialogObject table) 'ADSAccount_ARS_Deprovisioned' and 'ADSGroup_ARS_Deprovisioned' ObjectClass attribute contains multiple values, and the definition compares whether ObjectClass is exactly "USER" or "GROUP", respectively, and thus the task does not appear. -
解决办法
WORKAROUND
Update the ObjectClass value to be only 'USER' or 'GROUP', as the case may be, for the objects that require deprovisioning via Manager. E.g.:UPDATE ADSAccountSET ObjectClass = 'USER'WHERE UID_ADSAccount = ‘d70cd584-7b95-460e-953c-e39e8549753e’
STATUS
This will be addressed in service pack 2 for version 7, i.e. 7.0.2.