Use-case: How to create rules to automatically update user attributes?
Scenario 1: Modifying users' group memberships automatically when their departments or cities are changed due to organizational restructuring/transfers/mergers and acquisitions.
Scenario 2: Updating the manager attribute depending on the values in the department.
Organizational restructuring, M&A, and other developments often call for a change in the departments and cities of employees. With these changes, there arises a need to change the group membership as well. For example, an employee shifting from Sales to Marketing would need to be made a member of appropriate marketing-specific groups and the membership from sales-specific groups would need to be removed. Such changes can be automated using the Modification Rules option of ADManager Plus' user modification templates.
User modification templates help administrators in streamlining the Active Directory user account modification process as per their organizational needs. With the Modification Rules option in these templates, administrators can specify the fields that should be automatically updated during the modification process, based on the changes happening to other specific field(s). These templates help administrators and help desk technicians save a huge amount of time and effort as they do not have to apply the same value to each user individually, whenever they modify user accounts.
All you need to do is create a user modification template in which said the condition is specified (e.g. if the department is 'X', memberOf must take the values 'Y' and 'Z'). You can specify multiple departments with their respective group memberships, in a single template. Whenever you need to transfer any users to a different department, just select this template, change the department, and group memberships will be automatically updated. A similar approach can be taken for handling changes in cities and countries as well.
You can follow these steps to create a user modification template and specify the required conditions:
Step 1: Go to AD Mgmt --> User Management --> User Modification Templates
Step 2: In the User Modification Templates page, click Create New Template
Step 3: Click Modification Rules.
Step 4: Enter a name for the template and select the domain. Click Create New Rule.
Step 5: Click Add Conditions.
Step 6: Specify 'Department' and name of the department in Conditions. In Assign Values, select 'MemberOf', specify the desired groups using the pencil icon, and click Add. To specify group membership for another department, click Add Rule option displayed right under Modification Rules and follow the same process. Similarly, you can add another condition for 'City'. Then, save the template.
While modifying any user's department/city, you simply need to select this template to auto-update the group membership
ADManager Plus Team
Toll Free:+1888-720-9500
Email: support@admanagerplus.com
ADManager Plus - Active Directory Management & Reporting Software