eb Roles assigned using Active Directory

Can roles be assigned to users using Active Directory? Users are already created using Active Directory.

  • No, not directly. You can assign roles to a template and set that template to be used by the AD Sync. But AD Sync can only use one template, which means that every user it creates gets the same roles per the template. 

    Also, once the users are created, which sounds like the case with your community, the only thing that the AD Sync can do is enable or disable them based on the ADCriteria setting. It won't change role assignments or any other metadata.

    Eric Rajala | Consultant

    Cohesive

    Email: eric.rajala@cohesivegroup.com

    www.bentley.com

       
    This is a test

  • On 16.7, it can be done with an AD map object in Director and AD Sync. You would need multiple AD groups in Active Directory from which you can make a search query in eB SMC (in the Active Directory section) and then define what needs to be done with what the query finds. Then, in the AD Mapping object (under eB System class in Director), you can set in Notes a Role Mapping XML where it would read the AD groups found by the query in SMC and then assign eB Roles and Skills automatically. It's been set up this way for the site I support since 2018 and every user have been created (and deactivated) by AD Sync ever since.

  • The AD Sync can be configured to use a template to which roles have been assigned. However, as AD Sync only supports a single template, all new users will be assigned the same predefined roles.  free games