Deprovisioning groups
Active Roles provides the ability to deprovision rather than delete groups. Deprovisioning a groups refers to a set of actions that are performed by Active Roles in order to prevent the use of the group.
The Deprovision command on a group updates the group object in Active Directory as prescribed by the deprovisioning policies. Active Roles comes with a default policy to automate some commonly-used deprovisioning tasks, and allows the administrator to configure and apply additional policies.
Steps for deprovisioning a group
To deprovision a group
- In the console tree, locate and select the folder that contains the group you want to deprovision.
- In the details pane, right-click the group, and then click Deprovision.
- Wait while Active Roles updates the group.
|
|
NOTE:
- You can deprovision multiple groups at a time. Select two or more groups, right-click the selection, and then click Deprovision.
- The Deprovision command is also available in the Active Roles Web Interface.
- When you click the Deprovision command, the operation progress and results are displayed. When the operation is completed, Active Roles displays the operation summary, and allows you to examine operation results in detail.
- On a deprovisioned group, you can use the Deprovisioning Results command to view a report that lists the actions taken during the deprovisioning operation. For each action, the report informs about success or failure of the action. In the event of a failure, the report provides a description of the error situation.
- If a deprovisioned group needs to be restored (for example, if a group has been deprovisioned by mistake), the group can be reset to the state it was in before the deprovisioning occurred. This can be accomplished by using the Undo Deprovisioning command on the deprovisioned group.
|
Restoring deprovisioned groups
Active Roles provides the ability to restore deprovisioned groups. The purpose of this operation, referred to as the Undo Deprovisioning operation, is to roll back the changes that were made to a group by the Deprovision operation. When a deprovisioned group needs to be restored (for example, if a group has been deprovisioned by mistake), the Undo Deprovisioning operation allows the group to be restored to the state it was in before the changes were made.
Steps for restoring a deprovisioned group
To restore a deprovisioned group
- In the console tree, locate and select the folder that contains the group you want to restore.
- In the details pane, right-click the group, and then click Undo Deprovisioning.
- Wait while Active Roles restores the group.
- When you click the Undo Deprovisioning command, the operation progress and results are displayed. When the operation is completed, Active Roles displays the operation summary, and allows you to examine the operation results in detail. You can view a report that lists the actions taken during the restore operation. For each action, the report informs about success or failure of the action. In the event of a failure, the report provides a description of the error situation.
