Active Directory synchronization

[Former Member]

Hi Experts,

We're currently facing a blocking issue with our project.

We have users set in different Active Directory groups ; every time we add an user to a group, the user is created in BO.

The problem is when we switch users to a different Windows AD group : they should move to the corresponding BO group. However, even if they do appear in the target group, they do not disappear from their origin group. in BusinessObjects, they appear in both groups.

We checked on the Windows AD, and the users are no longer in their origin group, as wanted.

Did anyone ever face this behavior ?

We're working on the BI 4.1 SP04 Patch 8

Thanks a lot for your help

[Former Member · Accepted solution]

Hi everyone,

We found the answer As described in SAP Note 2118522, the issue was that the user we wanted to move was the only user of its user group. Therefore, the BI platform refused to clear it from it. This issue will be fixed in the coming patches/version.

Thank you for your help!

[Former Member · Accepted solution]

Hi Raphael,

Thank you for sharing the solution .

Regards

Nishant

[former_member182521]

It seems your AD graph is not updated in BusinessObjects. Please update the same in Authentication -> Windows AD from CMC.

Also can you brief how you are mapping a user from AD group to BusinessObjects Group to understand better.

[Former Member]

What action you take on BO to sync the group ?

Do you manually update the groups and alias via 'Update on Demand' ?

Which option do you choose for update ?

Is it scheduled ? Which option is chosen for schedule update ?

[Former Member]

Hi ,

what you are trying to pursue can i get the exact or detailed info. of created groups in Active Directory side as well as the BO ADMIN side.

.

Waiting for your reply.

[Former Member]

Hi Nishant,

Let's picture it that way :

We have two AD Groups, ADGroup1 and ADGroup2 in the Active Directory.

We have two corresponding BusinessObjects Groups : BOGroup1 and BOGroup2

We have one user in ADGroup1. Automatically, he is replicated in BO in the group BOGroup1.

When we move the user from ADGroup1 to ADGroup2, we expect the user to be removed from BOGroup1 and placed in BOGroup2.

The error we're facing is that the user is copied in BOGroup2 but not removed from BOGroup1. It belongs to the two groups while it should be only inside the BOGroup2

Thank you for your help

[Former Member]

Hi Raphael ,

Thanks for the reply as well as detailed explanation of your issue , will try my best to help out you for this issue.

Thanks

Nishant