User Deprovision - Set Account Disabled TRUE?


Hi,

How can I set Account Disabled as TRUE (checkbox as checked) in Login
Restriction for a user object through a driver policy?

Use Case Detail : In deprovisioning scenario, revoke all access of the
user, move the user to Inactive Container and set Account Disabled as
checked.

Thanks!


--
neha_gupta
------------------------------------------------------------------------
neha_gupta's Profile: https://forums.netiq.com/member.php?userid=1249
View this thread: https://forums.netiq.com/showthread.php?t=54239

  • What have you tried so far? The attribute is 'Login Disabled', and you
    can set it to true at any time using a driver's action to set an attribute
    (source or destination depending on how the event is picked up). Use the
    'set' option (vs. 'add') as it is a single-valued attribute, and you'll
    want it to be set to the desired value regardless of what may, or may not,
    already be there.

    If you have issues getting going, describe what you are trying, what you
    are seeing, what you are expecting to see, etc. Include the procedure you
    envision for this as well (time-based deprovisioning, activity-based
    deprovisioning, etc.). I presume you're using a Null driver for this, so
    maybe some other system is indicating the object should be deprovisioned,
    or perhaps it is something done on some date (or should be) with a
    WorkOrder, for example.

    --
    Good luck.

    If you find this post helpful and are logged into the web interface,
    show your appreciation and click on the star below...

  • Hi,

    I have to make the user's account as Disable instead setting
    loginDisable attribute as TRUE. As I mentioned its a User Deprovisioning
    use case so we have to set Account Disabled (under Login Restriction tab
    in iManager) as checked.

    I am trying with a Loopback driver for the same.

    Thanks!


    --
    neha_gupta
    ------------------------------------------------------------------------
    neha_gupta's Profile: https://forums.netiq.com/member.php?userid=1249
    View this thread: https://forums.netiq.com/showthread.php?t=54239

  • Answers to the other questions would help.

    The attribute you refer to (under iManager) is the same one I mentioned.
    Following the steps mentioned previously should let you set the value.
    I'd use a Null (vs. Loopback) driver for simplicity, but you're welcome to
    use anything you feel appropriate... it's just more-confusing to do so.

    --
    Good luck.

    If you find this post helpful and are logged into the web interface,
    show your appreciation and click on the star below...

  • ab;260591 Wrote:
    > Answers to the other questions would help.
    >
    > The attribute you refer to (under iManager) is the same one I mentioned.
    > Following the steps mentioned previously should let you set the value.
    > I'd use a Null (vs. Loopback) driver for simplicity, but you're welcome
    > to
    > use anything you feel appropriate... it's just more-confusing to do so.
    >
    > --
    > Good luck.
    >
    > If you find this post helpful and are logged into the web interface,
    > show your appreciation and click on the star below...


    Hi neha_gupta,
    Are you looking for syntax of this command?

    > <do-set-src-attr-value name="Login Disabled">
    > <arg-value type="string">
    > <token-text xml:space="preserve">true</token-text>
    > </arg-value>
    > </do-set-src-attr-value>


    Alex


    --
    If you find this post helpful, please show your appreciation by clicking
    on the star below :cool:
    ------------------------------------------------------------------------
    al_b's Profile: https://forums.netiq.com/member.php?userid=209
    View this thread: https://forums.netiq.com/showthread.php?t=54239