How can I stop specific attributes like the Employee ID from syncing to Google Workspace using ADManager Plus?

How can I stop specific attributes like the Employee ID from syncing to Google Workspace using ADManager Plus?

Objective 

In scenarios where certain attributes like the Employee ID should not be sent to Google Workspace during user provisioning, administrators can modify the provisioning flow in ADManager Plus to bypass syncing specific fields. This guide outlines a method for separating attribute updates and controlling which values are pushed during account creation.

Prerequisites  

  • You need administrative access to ADManager Plus.

  • You should be familiar with user creation and modification templates.

  • The attribute you intend to exclude should not be marked as mandatory in the Google Workspace provisioning template.

Steps to follow  

Step 1: Create or edit a user creation template 

  1. Log in to ADManager Plus.

  2. Navigate to Management > User Management > User Creation Templates.

  3. Click Create New Template to create a new one, or click the Edit icon next to an existing template you want to modify.

  4. Click Enable Drag-and-drop.

  5. Locate the attribute you want to exclude (e.g., Employee ID), click the pencil icon next to it, and select Delete.

  6. Make sure the Google Workspace provisioning check box is selected to enable account creation in Google.

Step 2:  Create user modification template to update Employee ID

  1. Navigate to Management > User Management > User Modification Templates and click Create New Template. In the new template, the Employee ID attribute is included by default.

  2. Next, navigate to Management > User Management > User Modification > Modify Single User.

  3. Search for the user you want to update and click Modify User.

  4. From the Select Template dropdown, choose the template you just created.

  5. Enter the Employee ID, then click Update User to save the changes.

Step 3: Apply the modification after provisioning

  1. After the user is provisioned in Google Workspace, do one of the following:

  • Apply the modification template manually.

  • Use an automation rule to apply the template automatically.


This ensures the Employee ID is updated in AD only without syncing it to Google Workspace.

Tips  

  • Test the template changes in a test environment before applying them to the production environment, especially if you’re using automation.

  • Regularly review both user creation and modification templates to ensure they align with your organization’s provisioning policies and attribute mapping needs.

                    New to ADSelfService Plus?