Add or Edit a Directory Source
To add or edit a new directory source, complete the following steps:
-
Go to the System Configuration cogwheel in the top right corner of Permission Assist and select Directory Sources.
-
If you are creating a new directory source, select the Add Directory Source button in the top right corner of the page.
If you are editing an existing directory source, select the directory source from within the list. The Directory Sources Detail page is displayed with the Imports tab shown by default.
-
Complete each of the fields within the Settings tab as needed and select the Save button (at the very bottom of the page). An initial verification of the connection to Active Directory is made, and a Success message appears briefly in the bottom right corner of the page.
-
Complete a test sync to pull Identities and group information into the Principles tab, which is a staging area for potential Identities (this will be very helpful as you create or edit rules):
-
Select the Synchronize Directory button in the top right corner of the page and select Update Now. The "Is This A Test" box appears.
-
Select the "I am verifying settings; do NOT merge..." checkbox, and then select the Update button. Identities are pulled into the Principles tab and related group information is pulled into the Groups tab, but at this point - because a test sync was run - no "official" Identities have been imported yet.
-
Select the Active Directory link just above the import number to go back to the main page.
-
-
Review the list of potential Identities by selecting on the Principles tab:
-
Review the total count of active Identities (select the Status: Any quick filter and uncheck Disabled; disabled accounts do not count toward your license). Does the number of active Identities fit within your license?
-
Are there any Identities you might want to filter out such as mailbox accounts?
-
-
Select the Rules tab and define the rules Permission Assist will apply as accounts are imported. Remember - these rules are applied in order and the first rule to apply is seen as more important than any other rule that might also apply.
-
Import Identities by selecting the Synchronize Directory button in the top right corner of the page and select Update Now. The "Is This A Test" box appears.
-
If you are still working on the rules and want to see how the rules affect the list of Identities, select the "I am verifying settings; do NOT merge..." checkbox, and select the Update button. Continue to review the Principles tab and run test syncs until you're ready to officially import Identities.
-
If you are confident in the rules and are ready to pull in an official list of Identities, leave the "I am verifying settings; do NOT merge..." checkbox unchecked and select the Update button. The official list of Identities is imported; don't forget to go back to the Rules tab and turn on automatic syncs if they aren't already turned on.
-