
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
Hi,
I am trying to perform a user move to another Google OU whe their department or cost center changes.
However I am receiving 400 Bad Request for the user move operation.
I had double confirmed the Destination OU is there. I am not doing any OU Mirroring.
My DIRXML Rule is as follow
<rule>
<description>Move User to the right Google OU when Department or Cost Center is changing</description>
<comment xml:space="preserve">Move User to the right Google OU when Department (jabatanSekarang) or Cost Center change (costCenter) attribute is changing</comment>
<conditions>
<or>
<if-op-attr name="jabatanSekarang" op="changing"/>
<if-op-attr name="costCenter" op="changing"/>
</or>
</conditions>
<actions>
<do-move-dest-object>
<arg-dn>
<token-map dest="G-Org" src="Cost-Center" table="..\User Placement Mapping Table">
<token-op-attr name="costCenter"/>
</token-map>
<token-op-attr name="jabatanSekarang"/>
<token-text xml:space="preserve">\</token-text>
<token-src-name/>
</arg-dn>
</do-move-dest-object>
</actions>
</rule>
Attached the ndstrace for the error.
Accepted Solutions

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
Hi!
You should only specify the org unit DN on move, not the full new DN of the user.
Try the following updated rule:
<rule>
<description>Move User to the right Google OU when Department or Cost Center is changing</description>
<comment xml:space="preserve">Move User to the right Google OU when Department (jabatanSekarang) or Cost Center change (costCenter) attribute is changing</comment>
<conditions>
<or>
<if-op-attr name="jabatanSekarang" op="changing"/>
<if-op-attr name="costCenter" op="changing"/>
</or>
</conditions>
<actions>
<do-move-dest-object>
<arg-dn>
<token-map dest="G-Org" src="Cost-Center" table="..\User Placement Mapping Table">
<token-op-attr name="costCenter"/>
</token-map>
<token-op-attr name="jabatanSekarang"/>
</arg-dn>
</do-move-dest-object>
</actions>
</rule>

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
Hi!
You should only specify the org unit DN on move, not the full new DN of the user.
Try the following updated rule:
<rule>
<description>Move User to the right Google OU when Department or Cost Center is changing</description>
<comment xml:space="preserve">Move User to the right Google OU when Department (jabatanSekarang) or Cost Center change (costCenter) attribute is changing</comment>
<conditions>
<or>
<if-op-attr name="jabatanSekarang" op="changing"/>
<if-op-attr name="costCenter" op="changing"/>
</or>
</conditions>
<actions>
<do-move-dest-object>
<arg-dn>
<token-map dest="G-Org" src="Cost-Center" table="..\User Placement Mapping Table">
<token-op-attr name="costCenter"/>
</token-map>
<token-op-attr name="jabatanSekarang"/>
</arg-dn>
</do-move-dest-object>
</actions>
</rule>