Differences

This shows you the differences between two versions of the page.

--- tutorial:adm:systems_-_ad_remove_group_membership_when_the_contract_is_excluded [2020/03/04 07:57]
doischert
+++ tutorial:adm:systems_-_ad_remove_group_membership_when_the_contract_is_excluded [2020/03/04 08:28]
tsunami ↷ Page moved and renamed from tutorial:adm:systems_-_ad:remove_group_membership_when_the_contract_is_excluded to tutorial:adm:systems_-_ad_remove_group_membership_when_the_contract_is_excluded
@@ Line 30: / Line 30: @@
 Alternatively, you can use the regular synchronization of AD groups to set this behavior for some or all AD roles since this synchronization uses our [[tutorial:dev:ad_groups_sync_workflow|workflow]] to do many things related to managing AD groups.
-First, I will show you turn this feature on for all AD roles.
+First, I will show you how to turn this feature on for all AD roles.
 <note tip>This requires you to have the current workflow from the Extras module! Older versions will not support this.</note>
@@ Line 53: / Line 53: @@
 <code>idm.pub.acc.syncRole.roles.nameOfRoles.doNotSentValueOnExclusion</code>
-and as a value, type in the names of the relevant roles separated by comma. You can only use this if your roles do not have a comma in their names!
+and as a Value, type in the names of the relevant roles separated by comma. You can only use this if your roles do not have a comma in their names!
 {{ :tutorial:adm:systems_-_ad:08.png?direct&600 |}}
+Click save. When the next synchronization runs, all roles specified in the Value here will be set to be removed the contract becomes inactive.