立即与支持人员聊天
与支持团队交流

Identity Manager 9.0 LTS - Administration Guide for Active Roles Integration

One Identity Active Roles integration Synchronizing Active Directory using One Identity Active Roles Interaction with Active Roles workflows Interaction with Active Roles policies Managing Active Directory objects Configuration parameters for managing an Active Directory environment Default project template for One Identity Active Roles Active Roles connector settings

Displaying information about deprovisioning Active Directory user accounts and Active Directory groups

The following properties are displayed for deprovisioning Active Directory user accounts and Active Directory groups:

Table 9: Deprovisioning data
Property Description

Deprovisioning status

Status of deprovisioning sequence through Active Roles when an object is deleted. The data is loaded from Active Roles on synchronization.

  • No deprovisioning: The Active Directory object is active.

  • Deprovisioning successful: The Active Directory object was successfully deprovisioned.

  • Deprovisioning failed: An error occurred while deprovisioning the Active Directory object.

Deprovisioning date

Status of deprovisioning sequence through an Active Roles when a object is deleted. The information is loaded from the Active Roles during synchronization.

To display main data of deprovisioning an Active Directory user account

  1. In the Manager, select the Active Directory > User accounts category.

  2. Select the user account in the result list.

  3. Select the Change main data task.

  4. Select the Active Roles tab.

To display main data of deprovisioning an Active Directory group

  1. In the Manager, select the Active Directory > Groups category.

  2. Select the group in the result list.

  3. Select the Change main data task.

  4. Select the Active Roles tab.

Related topics

Restoring deprovisioned Active Directory user accounts and Active Directory groups in the One Identity Manager

You can restore deprovisioned Active Directory user account and Active Directory groups using One Identity Manager if required. The following methods are used to do this:

  • Undo deprovisioning

  • Restoring deleted objects

Both methods initiate a process for deprovisioning Active Directory objects in Active Roles. The process finds the deprovisioning status, updates some of the Active Directory object properties, like the name and the Active Directory container and in the One Identity Manager database, and sets the Active Directory object status to changed. All the Active Directory object properties are loaded in the One Identity Manager database by the next synchronization and the status is changed to published.

Detailed information about this topic

Deprovisioning Active Directory user accounts and Active Directory groups

Use this method to undo Active Directory user account and Active Directory group deprovisioning. You can use this method independent of the deprovisioning method implemented.

To undo Active Directory user account deprovisioning

  1. In the Manager, select the Active Directory > User accounts > Deprovisioned accounts category.

  2. Select the user account in the result list.

  3. Select the Undo deprovisioning task.

  4. Confirm the security prompt with Yes.

  5. Confirm with OK.

To undo Active Directory group deprovisioning

  1. In the Manager, select the Active Directory > User accounts > Deprovisioned groups category.

  2. Select the group in the result list.

  3. Select the Undo deprovisioning task.

  4. Confirm the security prompt with Yes.

  5. Confirm with OK.

Related topics

Restoring deleted objects

You can use this method as an alternative for Active Directory user accounts and Active Directory groups you have deprovisioned using the method Deprovision not delete. You find the deprovisioned Active Directory object, in this case, in the One Identity Manager database with status Deleted.

To restore a user account

  1. In the Manager, select the Active Directory > User accounts category.

  2. Select the user account in the result list.

  3. Click in the result list.

To restore a group

  1. In the Manager, select the Active Directory > Groups category.

  2. Select the group in the result list.

  3. Click Undo delete in the result list toolbar.

Related topics
相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级