IBM Security MaaS360

 View Only
  • 1.  Mark User as inactive when deleting in AD

    Posted Thu April 15, 2021 04:23 PM
    Hello,

    is there a way to mark a User as inactive in MaaS360, when the user is deleted in ActiveDirectory?
    The Module User Visibility is enabled in Cloud Extender.

    Best regards

    ------------------------------
    Falko Christ
    Administrator
    Primetime fitness GmbH
    Frankfurt am Main
    ------------------------------


  • 2.  RE: Mark User as inactive when deleting in AD

    Posted Fri April 16, 2021 05:28 AM
    Hi Falko
    You can configure this in your portal settings, here's a document explaining how. 
    Please let me know if you need anything else. 
    Best

    https://www.ibm.com/docs/en/maas360?topic=portal-configuring-user-settings-in-maas360

    ------------------------------
    Eamonn O'Mahony
    Technical Client Success Manager
    IBM Security
    Dublin, Ireland
    ------------------------------



  • 3.  RE: Mark User as inactive when deleting in AD

    Posted Fri April 16, 2021 10:33 AM
    Hi Eamonn,

    thanks for the information. One more question, when will a user marked as inactive?
    -On deleting the last device of the user?
    -On delting the user in ActiveDirectory and sync via Cloud Extender to Maas360?
    -On other actions?

    Best regards



    ------------------------------
    Falko Christ
    Administrator
    Primetime fitness GmbH
    Frankfurt am Main
    ------------------------------



  • 4.  RE: Mark User as inactive when deleting in AD

    Posted Fri April 16, 2021 11:09 AM
    Hi Falko
    Basically your configuration in the settings indicated will indicate the desired behaviour. 
    Please review the settings. 
    Best

    ------------------------------
    Eamonn O'Mahony
    Technical Client Success Manager
    IBM Security
    Dublin, Ireland
    ------------------------------



  • 5.  RE: Mark User as inactive when deleting in AD

    Posted Wed April 21, 2021 03:36 AM
    Hi Eammon - how are you since we last spoke.

    Changing the setting to Permanently Disable (as I've seen we don't do this) will that look back retrospectively on the next AD sync or will it only be for accounts disabled from here on?

    ------------------------------
    Matt Wilsher
    ------------------------------



  • 6.  RE: Mark User as inactive when deleting in AD

    Posted Wed April 21, 2021 04:41 AM
    Edited by Eamonn O'Mahony Wed April 21, 2021 04:41 AM
    @Matt Wilsher Nice to speak to you again. I wouldn't expect this to work retrospectively. For deletion of users which were previously created and are now obsolete, I would suggest you follow this document:
    - Users > https://www.ibm.com/docs/SS8H2S/com.ibm.mc.doc/pag_source/tasks/pag_users_bulk_delete.htm
    - User Groups > ​https://www.ibm.com/support/knowledgecenter/SS8H2S/com.ibm.mc.doc/pag_source/tasks/pag_users_bulk_delete_user_group.htm

    ------------------------------
    Eamonn O'Mahony
    Technical Client Success Manager
    IBM Security
    Dublin, Ireland
    ------------------------------