Create group on account creation if it doesn't already exist

Question

Hello,

When a user account is created, we would like for that user to be added to a group whose name is based on a certain naming convention. If the group doesn't yet exist, it would need to be created.

The group naming convention is UAC-VEN-%l%

So for example, if inputting "Tokyo" in the city field of the user creation form, it will add the user to the UAC-VEN-Tokyo group. If that group doesn't exist, it will first create the group and then add the user.

Answer 1

Hello,

If the required groups are located in the same container, you can use a business rule triggering After creating a user to achieve the required. The rule conditions and actions will rely on the template of the required group distinguished name to check whether the group exists and to add the user to the group. The template will contain the value reference to the City property (%l%) to build the group distinguished name. If the group exists, the user will be added to the group. If the group does not exist, the rule will create the group. For details on how to create directory objects in business rules, custom commands, and scheduled tasks, have a look at the following tutorial: https://www.adaxes.com/help/CreateMultipleObjectsInOneOperation. When creating a group object this way, you can specify the group members in the action configuration. To add the created user to the new group, specify the %distinguishedName% value reference in the Member property.

Finally, the business rule configuration should look like this:

Comments

This worked great. I just added another line under the Else statement to add the user to the newly created group. Thank you very much!

---

Hello,

Thank you for the confirmation. However, there is no need to use a separate action to add the user to the created group. As we mentioned, it can be done in the same action where the group is created. Just specify the %distinguishedName% value reference in the Member property and the group will be created with the user added as a member.

---

I did that, but it would give an error saying that the specified account doesn't exist, so to avoid that, I included an extra line to add the user to the new group.

---

Hello,

Thank you for specifying. That is not an expected behavior. Please, clarify, how exactly the business rule and the action creating a group were configured when you faced the error. If it is convenient, please, post here or send us at support@adaxes.com screenshots of the rule and action configuration. Additionally, please, specify how the user account is created. Is it done in Adaxes using a built-in functionality?