Quantcast
Channel: VMware Communities : All Content - All Communities
Viewing all articles
Browse latest Browse all 176760

AD Resource Mapping question

$
0
0

Apologies in advance for waffling…

 

We have our AD resource mappings set-up in quite a basic way I think, but since the upgrade to VSM it isn’t working in the same way to how it did in Infra.

 

We basically have resource mappings like this:

“Admin” AD group mapped to “Admin” Person template – “Apply template… On creation only”

“Officer” AD group mapped to “Officer” Person template – “Apply template… On creation only”

“Customer” AD group mapped to “Customer” Person template – “Apply template… On creation only”

 

These templates are just the basic settings and we then manually configure the Officers groups/roles, or just copy the settings from someone else.

 

We have all domain users added to the Customer AD group.  If someone then needs to be an officer as well, we just add them into the Officer AD group.  After the next sync, we then just copy the officer setup from an existing officer to the person who is now an officer.

 

This worked fine in Infra, where the Officer records were separate to Customers.  However, in VSM, when we add people to the Officer group, they’re not getting the Officer template applied, as clearly their person record is already created.

 

I’ve had a read of help of the other settings, but am not sure what we should now be picking in order for it to keep working the same.

 

We clearly don’t want all of our manually applied changes to the Officer settings to be wiped out if we make a change a small change to the person's AD object (change in Job Title for example) or to the default Officer template, so I don't think we can pick On Create and Update.

 

I'm not sure if When template is different to last applied or When mapping is different to last applied will do what we want.  I’m guessing we need to select “When mapping is different to last applied”, but I’m worried if we make a small change to the default template then all of the manually set Officers settings will get wiped out.

 

Does that sound like the right setting we need to pick though, or can we not do it this way anymore?

 

I hope that makes some sense and thanks for any advice,

Ian


Viewing all articles
Browse latest Browse all 176760

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>