Any way to auto-manage a ST or Group from LDAP attribute?

[Angelo S. - Dominion Resources Angelo S. - Dominion Resources]

Any way to auto-manage a ST or Group from LDAP attribute?

Hi,

Is it possible to auto-manage a ServiceTeam or Group based off of an LDAP attribute?   For example: All {LDAP Attribute: EmployeeStatus = "ACTIVE"} are automatically placed in "Active Employee" group.

Thanks,

Angelo

[Angelo S. - Dominion Resources Angelo S. - Dominion Resources]

Emir,

Thanks for the response!   The version we are using is 2006.0.7.1.   The scenario I gave was only an example...   We are looking to address a dictionary permission issue due to regulatory issues.   We have fields in LDAP that contain the regulatory rules and have a need to permission dictionaries (read access) based on these rules.

Just curious...how do you setup filters to ignore users?   Is this manually managed?  &

[Emir AmEx (9.1)]

depends on which version you are using you might have different way of accomplishing this.

Why would you have inactive users in RC anyways? You can put a filter to ignore those users.

Depends on how many group you want to have, you can create a custom mapping to add a person to a queue on login or order on behalf ...

[Emir AmEx (9.1)]

There are 2 ways to limit the fields coming back from LDAP:

1. Have your LDAP Admin, restrict your application id to only see active employees (my approach) which prevents OrderonBehalf of users who are in RC DB but no longer active in LDAP.

2. Write a custom filter (see image for code location)