@Anshu_Kunal As you mentioned the UAC value should set automatically as per the IIQDisabled.
During initial AD account creation, the AD account status is setting properly if its prehire then in disabled mode with UAC as 514 and vice versa for rest of the status 512 as UAC value.
I’m facing an issue, when the user changed from prehire–>active state. My expectation would be AD account in IDN will be active, this is happening, but UAC value is not getting changed to 512. How do we take care of this update case.
I’ve the transform created to set the IIQDisabled, which is added in both create and update policy, but update is not working.
{
“name”: “IIQDisabled-AD”,
“type”: “lookup”,
“attributes”: {
“input”: {
“type”: “identityAttribute”,
“attributes”: {
“name”: “cloudLifecycleState”
}
},
“table”: {
“prehire”: “TRUE”,
“default”: “FALSE”
}
},
“internal”: false
}