[midPoint] field manager in AD

Ivan Noris ivan.noris at evolveum.com
Wed May 6 11:29:22 CEST 2020


Hi,

if I understand correctly, you would like to import the information
about user's manager from AD.

You are right there is no attribute for this in midPoint. This is by
design as the organization structure defines, who is the manager.

Example:

User "employee1" in midPoint is in organization Top -> Sales Division ->
Sales Team 1

In organization Sales Team 1 there is another user "manager1" assigned
to Sales Team 1 as manager (this is a relation of the assignment).

That makes user "manager1" manager of "employee1". It can be used for:

- displaying in the org. structure

- delegated administration: the manager can do something with his/her
subordinate employees

- approvals: the manager can approve requests of his/her subordinate
employees

There is no default attribute in UserType that would contain the
information "who is my manager". It is always computed by midPoint and
you can use methods in midpoint scripting library, e.g.

https://www.evolveum.com/downloads/midpoint/4.1/midpoint-api-4.1-javadoc/com/evolveum/midpoint/model/api/expr/MidpointFunctions.html#getManagersOidsExceptUser(com.evolveum.midpoint.xml.ns._public.common.common_3.UserType)

If you don't want to use it, you can define an extension attribute and
populate the manager from AD there. But then you would lose the default
functionality for deriving the managers from organizational structure as
described above.

Best regards,

Ivan

On 6. 5. 2020 11:14, Щенев Антон Вячеславович wrote:
>
> Hi,
>
> The user in the AD has a field its leader(manager). In midPoint, such
> a field was not found in Users. Of course, you can use any of the
> unoccupied, but as provided by the system?
>
>  
>
> Описание: Описание: Описание: cid:image004.png at 01D47D0D.3B8B0380
>
>  
>
>  
>
> С уважением,
>
> Щенев Антон Вячеславович
>
>
> _______________________________________________
> midPoint mailing list
> midPoint at lists.evolveum.com
> https://lists.evolveum.com/mailman/listinfo/midpoint

-- 
Ivan Noris
Senior Identity Engineer
evolveum.com

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20200506/09bba94b/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 1457 bytes
Desc: not available
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20200506/09bba94b/attachment.png>


More information about the midPoint mailing list