IBM Verify

IBM Verify

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  IGI Managing AD Dynamic Groups

    Posted Wed May 12, 2021 10:12 AM

    Dear Expert,

    Can IGI manage Active Directory Dynamic Groups?

    I mean (for example) not only assigning the right permission (i.e. AD Group) based on Identity Organizational Unit (e.g. Identity working in OU = Sales so to assign Permission "SALES" i.e. assign AD Group "SALES" to his AD account) but also creating a new AD Group/Permission based on a new Organizational Unit still not created in AD?

    Many thanks



    #Support
    #SupportMigration
    #Verify


  • 2.  RE: IGI Managing AD Dynamic Groups

    Posted Wed May 12, 2021 02:10 PM

    Unfortunately, no. IGI does not have the capability to create Groups in AD. But, I believe that the AD adapter (running as a Windows Service) can be customized to run a command script to execute custom operations. I am not a deep expert on the AD Agent, but it might be possible to customize the agent to meet the requirement.

    David



    #Support
    #SupportMigration
    #Verify


  • 3.  RE: IGI Managing AD Dynamic Groups

    Posted Mon May 17, 2021 05:42 AM

    Many thanks David i'll try to investigate it.



    #Support
    #SupportMigration
    #Verify


Related Content