Prevent adding of disabled users as group members (defined as membership rule)

Question

I need to prevent the following situation. Someone defined membership rule that adds direct members to group XYZ. Some of the users then gets disabled, because the emplyee has left the company. The user is removed from all groups during the decomission process, but is then again added to such adaxes-managed group.

Can I: A) have automation that checks all group membership rules and removes disabled users sub-rules? B) prevent the addition process via business rule etc?

PS: I've created business rule that prevents adding disabled users to groups but it works only for interactive additions, not the ones processed via membership rules

Answer 1

Hello,

A) have automation that checks all group membership rules and removes disabled users sub-rules?

It can only be done using a custom PowerShell script. Unfortunately, we do not have anything like that, but the following article should be helpful: https://adaxes.com/sdk/IAdmGroup2.

B) prevent the addition process via business rule etc?

Unfortunately, there is no such possibility. Business rule do not trigger upon membership updates based on rule-based groups settings. The behavior is by design and cannot be changed.