IIQ updating AD group attributes failing for some and working for others

	## Which IIQ version are you inquiring about?
	8.3P4
	
	Issue:  We have created a workflow that allows users to update certain active directory group information when they own the resource.  The update page allows the user to update things like name, description, requestable etc.  For some attributes the changes work for others the updates are not occuring.
	I am looking for ideas on why some update and others don't.  
	
	The updates that are working are
	CN, Name
	
	The updates that are failing are
	extensionAttribute3,extensionAttribute4 , sAMAccountName, Description 
	
	I am leaning towards permissions being the culprit but the AD team indicates that SailPoint should be good to go with updates.   
	
	Here is a  snippet of code 
	//Update the Display Name in multiple attributes
	adObjRequest.add(new AttributeRequest("extensionAttribute3", ProvisioningPlan.Operation.Set, displayName));
	adObjRequest.add(new AttributeRequest("extensionAttribute4", ProvisioningPlan.Operation.Set, displayName));
	adObjRequest.add(new AttributeRequest("name", ProvisioningPlan.Operation.Set, displayName));
	adObjRequest.add(new AttributeRequest("CN", ProvisioningPlan.Operation.Set, displayName));
	adObjRequest.add(new AttributeRequest("sAMAccountName", ProvisioningPlan.Operation.Set, displayName));
	
	adObjRequest.add(new AttributeRequest("description", ProvisioningPlan.Operation.Set, description));
	plan.add(adObjRequest);

Logging Evidence

No need to worry about this one. Turned out I was trying to update an attribute that was not writable.

2 Likes

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.