返回
-
标题
How to create Employees from ADSAccounts -
说明
What are the steps required to provision Employee objects from ADSAccounts? -
解决办法
The creation of Employees based on ADSAccounts is implemented out-of-the-box.
To control the behavior there are two configuration parameters available:
- Using TargetSystem\ADS\PersonAutoFullSync with the CREATE option, a sync will create the Employees based on existing Active Directory (AD) accounts (ADSAccount).
- Using TargetSystem\ADS\PersonAutoDefault will work as well, with CREATE, when an ADSAccount is created (manually).
One action is done by the FullSync (TargetSystem\ADS\PersonAutoFullSync), the other for all manual actions (TargetSystem\ADS\PersonAutoDefault).
In the end either the process "ADS_ADSAccount_Insert" will be generated (for inserts/updates of accounts by the sync) or the process "ADS_ADSAccount_Update_UpdatePerson" (for manual inserts/updates).
Both processes contain a ScriptExec job which executes the script "ADS_PersonAuto_Mapping_ADSAccount" or "ADS_PersonUpdate_ADSAccount".
The creation of an Employee for the given account is implemented in these scripts. So it would be possible to use these scripts to create Employee objects: either call this script for single cases in the Object Browser (ScriptTester) or in the Designer. Or create a custom defined process/script/... which calls one of the mentioned scripts.