Default Attribute Values policies are policies that allow you to automate the attribute values of any Person and flow those attributes to that Person's linked accounts in external account stores belonging to a target of the policy. (Policy targets can include any Management Roles, groups, Query Based Collections or Set Groups, individual people and Business Role and Location combinations.) For example, if you create Default Attributes Values policy that specifies that the Title attribute be set to "Contractor" for anyone assigned to the policy and then you assign the policy to a "Contractors" group, EmpowerID sets the Title attribute to Contractor for each Person in that group and then flow those changes to the corresponding attribute on each Person's user account.
This topic demonstrates how to create and assign a Default Attribute Values policy in EmpowerID.
|
From the Person Attribute drop-down, select the attribute for the Person that you want to set using the policy.
The values shown in this drop-down list include every type of attribute that could be associated with an EmpowerID Person, however, not all EmpowerID Person attributes correspond to attributes in Active Directory. Here is a list of the attributes and what attribute each corresponds to in Active Directory (if any):
|
Type a numeric value from 1 to 100 for the policy in the Priority field.
The priority value determines how EmpowerID treats the users affected by the policy if those users have other Default Attribute Values policies. The lower the number, the higher the priority. |
Default Attribute Values policies only apply to a Person's Primary Business Roles and Location. For example, if you assign a policy to a Business Role and Location and a Person has that Business Role and Location as a secondary Business Role and Location, the policy has no effect on that Person's attributes. |
On a server with the Active Directory module for PowerShell installed, run the following PowerShell cmdlet, substituting the attribute with that specified by your policy.
Get-ADUser -Filter {Title -eq "Contractor"} |
|