Reassigning direct reports when deprovisioning/moving manager

Question

I'm wondering if there are any recommended ways to do this in Adexes as part of the deprovisioning or mover process?

For example....

When de-provisioning any user, check, using a script, to see if they have any direct reports.
If so,
. Generate a list of the direct reports
. Prompt the initiator to select the new manager
. Reassign the 'manager' attribute of each direct report to the new manager
. Continue de-provisioning

However I'm not sure if that kind of interaction with the initiator is possible

Any ideas on how to do this please?

Thanks,
Bernie

Answer 1

Hello Bernie,

Unfortunately, there is no possibility to have such an interaction. As a solution, you can use an AD object picker parameter in your deprovisioning Custom Command. The parameter will specify a user that will be set as manager for direct reports of the deprovisioned account if it has any. To update the manager, use the below script. In the script, the $newManager variable specifies the name of the Custom Command parameter used to specify the new manager with the param- prefix.

$newManager = "param-NewManager" # TODO: modify me

# Get new manager DN
$newManagerDN = $Context.GetParameterValue($newManager)

# Get user subordinates
$subordinateDNs = $Context.TargetObject.GetEx("directReports")

# Update manager for subordinates
foreach ($subordinateDN in $subordinateDNs)
{
    $subordinate = $Context.BindToObjectByDN($subordinateDN)

    # Update manager
    $subordinate.Put("manager", $newManagerDN)

    # Save changes
    $subordinate.SetInfo()
}

The Custom Command will look like the following:

For information on how to use parameters in Custom Commands, have a look at the following tutorial: https://www.adaxes.com/tutorials_Active ... ommand.htm.

Comments

That will work for us - many thanks!

Regards,
Bernie