How we can change the ou?

[Shashikiran31 (Shashi Kiran)]

What are ways through which we can change the ou of the identities.

[nick01king (Nicholas King)]

Hi @Shashikiran31

Use AC_NewParent in the provisioning plan as an attribute and the value is the OU path.

[Sriindugula (Sri Veera Siva Kumar Indugula)]

Hi @Shashikiran31

There are multiple instances where you can update the plan to update the OU of the account.

1. add like below to the plan in before provisioning rule

For example, if your new ou is :

newOU = "OU=Disabled,DC=test,DC=com";

Create a plan to provision the user to new OU:

List li = new ArrayList();

AccountRequest accreq = plan.getAccountRequest();
accreq.add(new AttributeRequest("AC_NewParent",ProvisioningPlan.Operation.Set,newOU));
accreq.setNativeIdentity(nativeIdentityAD);
li.add(accreq);

plan.setAccountRequests(li);

2. add the AC_NewParent in the provisioning policy (if ou changes during specific operation/use case) and value to corresponding OU (using rule or script if there is a calculation)

Hope this helps!

Thanks

[Sriindugula (Sri Veera Siva Kumar Indugula)]

@Shashikiran31 along with my above response, below thread is useful to go through for your question:

Move User to other OU (Organization Unit) on Active Directory Application

Which IIQ version are you inquiring about? Version 8.2 Share all details related to your problem, including any error messages you may have received. Hi there, I need to change the OU (Organization Unit) of a Identity/User in Active Directory Application. I didn’t found out any OOB functionality to do this, so I assuming I need to develop some code… If so, can you please give some highlights/example on how to do it? I need to change all the user’s that have a specific entitlement from Activ…

Thanks

[vedeepak (Deepak Vema)]

Create a new Attribute Req and pass new OU in third parameter and add it to the plan

AttributeRequest parReq = new AttributeRequest("AC_NewParent", ProvisioningPlan.Operation.Set, newOU);

[bhanuprakashkuruva]

Hi @Shashikiran31 ,

May I know for which application you are trying? Is it for AD or for LDAP?