On 5/21/2019 12:14 PM, sma wrote:
>
> Reading your answer again, I think I found the problem, the default
> mapping for "permission-account or user mapping" is User ID from source
> and NOT Account ID from source.
>
>
> Now after changing this I get the following with CSV fulfillment :
>
> changeItemId,changeRequestType,fulfillmentInstruct ions,userName,account,appName,reason,permName
> "22","ADD_PERMISSION_TO_USER","","John Demo","CN=John
> Demo,OU=users,OU=idsa,DC=demoidsa,DC=com","AD Account Permissions","Add
> Permission to user for permission ERP_Administrators to be given to John
> Demo requested by John Demo. Reason for request: Test; Test with member
> mapped to Account ID from source","ERP_Administrators"
>
>
> And finally , the LDAP AD Fulfillment get :
>
> Fulfilled Via DAAS
> May 21, 2019 6:07:13 PM
> Comment: Change Item '23' Fulfilled. Type: ADD_PERMISSION_TO_USER,
> Target Account: CN=John Demo,OU=users,OU=idsa,DC=demoidsa,DC=com, Target
> Permission: CN=ERP_Administrators,OU=groups,OU=idsa,DC=demoids a,DC=com
> Verification required


Woo Hoo! I got one right! See what I mean about thiis aspect being a
little bit confusing?