Add/Update Multiple Groups

Operation Name

Function Overview

Data Model

Properties

Basic settings

Required settings

Item name	Required/Optional	Use of variables	Description	Remarks
Destination	Required	Not available	Select a global resource. For more details on global resource settings, refer to "Global resource properties". [Add]: Adds a new global resource. [Edit list]: Enables to edit the global resource settings in "Edit resource list".
Update accounts that match the value of the Search key	Optional	Not available	Search input data of items that [Search key] is selected as criteria, then select whether to update if matching accound exists. [Not checked]:(Default) Delivers input data to Mapper without update. [Checked]: Updates input data of items that [Update object] is selected.
Search key/Update object	Required	-	Specify the item regarded as search key and the item regarded as Update object.
Search key/Update object/Search key	Optional	Not available	Select the item regarded as search key. [Checked]: Regards as a search key. [Not checked]:(Default) Not regards as a search key.	Criteria will be a match with corresponding item of input data. If multiple rows are selected, it will be AND criteria.
Search key/Update object/Update object	Optional	Not available	Select the item regarded as Update object. [Checked]: Regards as an Update object [Not checked]:(Default) Not regards as an Update object.
Search key/Update object/Item name	Required	Not available	Display item name.
Search key/Update object/Item name(Japanese)	Required	Not available	Display item name(Japanese).

Comments

Schema

Schema definition

Input schema

<?xml version="1.0" encoding="Shift_JIS"?>
<activedirectory>
<group>
  <cn></cn>
  <sAMAccountName></sAMAccountName>
  <groupType></groupType>
  <groupNameIncludedMember></groupNameIncludedMember>
  <description></description>
  <mail></mail>
  <info></info>
</group>
</activedirectory>

Output schema

<?xml version="1.0" encoding="Shift_JIS"?>
<activedirectory>
<group>
  <cn></cn>
  <sAMAccountName></sAMAccountName>
  <groupType></groupType>
  <groupNameIncludedMember></groupNameIncludedMember>
  <description></description>
  <mail></mail>
  <info></info>
</group>
</activedirectory>

• Item without attribute will be set up as ""(null character).
• If multiple output information exists, setting order will be unsettled.

Loading Schema on Mapper

Mass Data Processing

Transaction

PSP Usage

Available Component Variables

Content of Process Per Settings

Update row that match value of the key	Search key	Update object	Match data	Process
No update	Not selected	Not selected/selected	Yes/no	Register all items of input data that have been set
No update	Selected	Not selected/selected	No	Register all items of input data that have been set
No update	Selected	Not selected/selected	Yes	Give input data to Mapper without register/update
Update	Not selected	Not selected/selected	Yes/No	Register all items of input data that have been set
Update	Selected	Not selected	No	Register all items of input data that have been set
Update	Selected	Selected	No	Register all items of input data that have been set
Update	Selected	Selected	Yes	Update items that [Update object] are selected If target inputa data is"", set point will be deleted
Update	Selected	Not selected	Yes	Nothing will update because [Update object] are not selected

• If input data corresponding to selected [Search key] is not set up, it will not become search criteria.
• If input data corresponding to group type is not set up, it will register/update "global security".
• Registeration/update process are executed 1 row at a time for process and become definite. Therefore, even if error occurs during the process, previous registeration/update data will still be reflected.

Specification Limits

• Registered account is created in "Users".


• If multiple accounts corresponding to search criteria exists, all of them will be recognized as Update object.


• The account can be identified by specifying it in search criteria, since [Group name(Pre-Windows2000] is unique attribute in the Active Directory.


• Following update for a group type cannot be done due to specifications for Active Directory.
  • Update from "domain local" to "global"
  • Update from "global" to "domain local"
• When adding group with checked [Include child domain as operation target] in global resource, "jp.synctrust.util.account.context.ContextException" error may occur if an account which matches to the name set in [Group name] or [Group name(Pre-Windows2000)] is registered to the child domain. In this case, remove check from [Include child domain as operation target].

Main Exception