After AD Integration all our team members lost access to user creation

[Former Member]

After AD Integration all our team members lost access to user creation..only using Admin acct we can create IdS.

Is any other solution so that we can able to create ids. what precautions we need to take while doing AD Integration so that we cant loss access to user creation.

[Former Member]

Hello vijay.maddula

If you told about SAP MDM that working in LDAP environment.

List of MDM users in MDM repository, as usually, duplicate list of MDM users in LDAP

When user connect to MDM - MDM check user name and password in LDAP .

If user present in LDAP and have permissions to connect to MDM - MDM check permissioins from own users list(from roles).

If you add/delete/modify user in LDAP and it doesn't present in MDM - he/she doesn't connect to MDM

The same situation if user doesn't present in LDAP or if it dosn't have permissions to connect to MDM.

If user have permissions in LDAP and dosn't have in MDM - MDM permissions will be basic.

Therefore users permissions for create another user maybe set either in LDAP or in MDM(in user role)

In MDM 7.1 Admin - user by default and had permissions to create new user

I suppose it is help you.

Regards

Kanstantsin Chernichenka