Open topic with navigation

Active Directory actions

These actions let you use Asset Lifecycle Manager to initiate and automate common Active Directory tasks.

Before you can define Active Directory actions, you need to provide the LDAP path and credentials to connect to the Active Directory users or groups you want to include as participants in workflow processes. See Configuring users/groups.

The Active Directory actions you can automate in Asset Lifecycle Manager are described below.

Add/remove from group

This action lets you add a user to or remove a user from an Active Directory group. When the action occurs in the course of a process, the user is added to or removed from the specified Active Directory group.

• Name: Descriptive name for the action.
• Action: (Advanced) The action to perform on this group.
• Connection: (Advanced) The Active Directory connection to use for this action.
• Group name: (Advanced) The Active Directory group in which the user will be added or removed.
• User name: (Advanced) The login name of the Active Directory user being added.

Create/delete group

This action lets you create or delete an Active Directory group. When the action occurs in the course of a process, the group is created or deleted in the specified Active Directory location.

• Name: Descriptive name for the action.
• Action: (Advanced) Create or delete group.
• Connection: (Advanced) The Active Directory connection to use for this action.
• Group name: (Advanced) The name to assign to the group being created.
• Type: (Advanced) The type of group to create.

Create/delete user

This action lets you create or delete an account for an Active Directory user. When the action occurs in the course of a process, the user's account is created or deleted in the specified Active Directory location.

• Account options: (Advanced) Select one or more options from the list. A unique number will be assigned to represent the selected options.
• Name: Descriptive name for the action.
• Action: (Advanced) Create or delete user.
• Connection: (Advanced) The Active Directory connection to use for this action.
• Attributes: (Advanced) Attributes associated with the user.
• Create mailbox: (Advanced) Create a MS Exchange mailbox for the user. Exchange settings need to be specified in the Domain settings dialog box in the Database utility (see "Advanced" under Configuring users/groups).
• Display name: (Advanced) A display name for this user.
• Given name: (Advanced) The user's first name.
• Login name: (Advanced) The user's login name.
• OU: (Advanced) The user's Organizational Unit.
  
• Password: (Advanced) Initial password for the user.
• Surname: (Advanced) The user's last name.

Get/set user information

This action lets you get or set new attributes or values for an Active Directory user's account. When the action occurs in the course of a process, the specified changes are made to the user's account.

• Name: Descriptive name for the action.
• Action type: (Advanced) The type of the action.
• Attribute action: (Advanced) Select whether to get or set the Active Directory user attribute.
• Attributes: (Advanced) The attributes to get or set for this Active Directory user. Click the ellipsis (...), click Add, and type the attribute you want to change. You can also insert field mappings. Multiple attributes for the Set action are represented as name=value pairs, separated by the caret symbol (^) and can be modified from the value box. (The Get action only lets you obtain one value per action.)
• Connection: (Advanced) The Active Directory connection to use for this action.
• User name: (Advanced) The user's login name.
• Results: (Advanced) The mapped field where you want to store the results of this action. This only works when a Get is performed.

Reset password

This action lets you set or change a password for an Active Directory user. When the action occurs in the course of a process, the specified user's password is changed. It isn't necessary to provide the user's current password; only the new password is required.

• Name: Descriptive name for the action.
• Connection: (Advanced) The Active Directory connection to use for this action.
• Password: (Advanced) The new password to assign.
• User name: (Advanced) The user's login name.

Update account

This action lets you change or set new account options for an Active Directory user. When the action occurs in the course of a process, the specified changes are made to the user's account.

• Account options: (Advanced) Select one or more options from the list. A unique number will be assigned to represent the selected options.
• Name: Descriptive name for the action.
• Attributes: (Advanced) The attributes to get or set for this Active Directory user. Click the ellipsis (...), click Add, and type the attribute you want to change. You can also insert field mappings. Multiple attributes are represented as name=value pairs, are separated by the carat symbol (^), and can be modified from the value box. The Get action only lets you obtain one value per action.
• Connection: (Advanced) The Active Directory connection to use for this action.
• OU: (Advanced) The user's Organizational Unit.
• User name: (Advanced) The user's login name.