Add or Edit a Directory Source

To add or edit a new directory source, complete the following steps:

  1. Go to the System Configuration cogwheel in the top right corner of Permission Assist and select Directory Sources.

  2. If you are creating a new directory source, select the Add Directory Source button in the upper right corner of the page.

    If you are editing an existing directory source, select the directory source from within the list. The Directory Sources Detail page is displayed with the Imports tab shown by default.

  3. Complete each of the fields within the Settings tab as needed and select the Save button (at the very bottom of the page). An initial verification of the connection to Active Directory is made, and a Success message appears briefly in the lower right corner of the page.

  4. Complete a test sync to pull Identities and group information into the Principles tab, which is a staging area for potential Identities (this will be very helpful as you create or edit rules):

    1. Select the Synchronize Directory button in the upper right corner of the page and select Update Now. The "Is This A Test" box appears.

    2. Select the "I am verifying settings; do NOT merge..." checkbox, and then select the Update button. Identities are pulled into the Principles tab and related group information is pulled into the Groups tab, but at this point - because a test sync was run - no "official" Identities have been pulled in yet.

    3. Select the Active Directory link just above the import number to go back to the main page.

  5. Review the list of potential Identities by selecting on the Principles tab:

    1. Review the total count of active Identities (select the Status: Any quick filter and uncheck Disabled; disabled accounts do not count toward your license). Does the number of active Identities fit within your license? 

    2. Are there any Identities you might want to filter out such as mailbox accounts?

  6. Select the Rules tab and define the rules Permission Assist will apply as accounts are pulled in. Remember - these rules are applied in order and the first rule to apply is seen as more important than any other rule that might also apply. 

  7. Pull in Identities by selecting the Synchronize Directory button in the upper right corner of the page and select Update Now. The "Is This A Test" box appears.

    1. If you are still working on your rules and want to see how the rules affect the list of Identities, select the "I am verifying settings; do NOT merge..." checkbox, and select the Update button. Continue to review the Principles tab and run test syncs until you're ready to officially pull in Identities.

    2. If you are confident in your rules and are ready to pull in an official list of Identities, leave the "I am verifying settings; do NOT merge..." checkbox unchecked and select the Update button. The official list of Identities is pulled in; don't forget to go back to the Rules tab and turn on automatic syncs if they aren't already turned on.