Introduction
This task looks for products which have a Change AD group membership or a Change HelloID group membership task attached, with the Membership Action set to Add Membership. Each such product is then assigned to all HelloID users who are already in the associated Group. Additionally, each such product is revoked for cases where Membership Action set to Remove Membership.
The most common use case for this task is to run after the Sync AD groups to products task. This task will assign each newly created product to all users who already have the group membership granted by the respective product.
Warning
We suggest only running this task once, for an initial synchronization. Subsequent or scheduled runs can cause unexpected behavior. For example, if this task runs when HelloID group membership is out of sync with AD group membership, users may incorrectly lose ownership of products.
Task Settings
|
Name |
Description |
Example |
Comment |
|
Api key |
The key value of a HelloID API key. |
TYZAJTCEWBVBJXEPSFNXUVUBYEAJPPLA
|
|
|
Api secret |
The secret value of a HelloID API key. |
dZqAfxYzLpethsgrzzwLgAVyDXcDSurG |
|
|
Include Products with AD group actions |
Include products with an attached Change AD group membership action. |
||
|
Include Products with HelloID group actions |
Include products with an attached Change HelloID group membership action. |
|
|
|
Execute the actions configured in the approval step |
For each product being assigned as part of this task, execute any actions attached to the Approved state. |
|
|
|
Execute the actions configured in the return step |
For each product being unassigned as part of this task, execute any actions attached to the Returned state. |
|
|
