Content:
Overview
To use Scheduled Suspend / Undo Suspend features of Cayosoft Suspend the target user or group objects must periodically be checked to see if a suspend or undo suspend action is needed.
Cayosoft Administrator can easily be configured to perform the necessary checks and actions freeing administrators from performing these operations manually.
Cayosoft Administrator Web UI also allows specifying date and time when a user or group should be suspended or undo-suspended.
Video Tutorial
Suspend scheduled tasks runbooks
Cayosoft Administrator provides two runbooks to configure execution and reporting for scheduled suspends, located under the Future Suspends runbook tile: 'Process Scheduled Suspend Operations' and 'Report on Scheduled Suspend Operations' runbook.
Until the Process Scheduled Suspend Operations runbook will be configured, Web UI would present a warning message to the end user, if a user selects Suspend on schedule option: Scheduled operations have not been enabled.
Future Suspends > Process Scheduled Suspend Operations runbook
- Navigate to Home page -> Automation section
- Click Suspend Scheduled Tasks
- Select Future Suspends. It contains these rules:
- AD Users | Process Scheduled Suspends
- AD Users | Process Scheduled Undo Suspends
- AD Users | Enforce Object Retention (Delete)
- AD Groups | Process Scheduled Suspends
- AD Groups | Process Scheduled Undo Suspends
- AD Groups | Enforce Object Retention (Delete)
- Specify the scope for each report
- Specify runbook name, description, and labels
- Select rules output
- Click Finish
- Open created runbook
- Select Enable checkbox near Enforce/Schedule section and set up a scheduling interval (we recommend running the rule once a day)
Suspend reports > Report on Scheduled Suspend Operations runbook
- Navigate to Home page -> Automation section
- Click Suspend Scheduled Tasks
- Select Suspend reports. It contains these rules:
- AD Users | Report on Scheduled Suspend Operations
- AD Groups | Report on Scheduled Suspend Operations
- AD Users Account Expired
- AD Users Expired Office 365 Linked User Status
- Specify the scope for each report
- Specify runbook name, description, and labels
- Select rules output
- Click Finish
- Open created runbook
- Select Enable checkbox near Enforce/Schedule section and set up a scheduling interval (we recommend running the rule once a day)
Process scheduled suspend operations set to run on specific time
If it's critical for you to process scheduled suspend operations according to the time set on the object, you could schedule the runbook to run hourly.
- Navigate to runbook processed scheduled suspend operations. By default it's Process Scheduled Suspend Operations
- In Enforce/Schedule section click Enable
- Click Hourly
Example: If client time is 9.00 am and server time is 12 pm, and you schedule the user suspend to 10 am, this user will be suspended by the next runbook execution, because 10 am already passed on the server.
Configure individual rules to process scheduled suspend and undo suspend operations
Configure Cayosoft Administrator to process scheduled suspends
- Create a new rule AD Users | Process Scheduled Suspends or AD Groups | Process Scheduled Suspends, depending on the objects you need to process.
- Define rule scope, suspend settings, etc
- Select Enable checkbox near Enforce/Schedule section and set up a scheduling interval (we recommend running the rule once a day)
Configure Cayosoft Administrator to process scheduled undo suspends
- Create new rule AD Users | Process Scheduled Undo Suspends or AD Groups | Process Scheduled Undo Suspends, depending on the objects you need to process.
- Define rule scope, suspend settings, new password, etc
- Select Enable checkbox near Enforce/Schedule section and set up a scheduling interval (we recommend running the rule once a day)
Configure Cayosoft Administrator to process scheduled object retention (delete)
- Create new rule AD Users | Enforce Object Retention (Delete) or AD Groups | Enforce Object Retention (Delete), depending on the objects you need to process.
- Define rule scope and action settings
- Select Enable checkbox near Enforce/Schedule section and set up a scheduling interval (we recommend running the rule once a day)
Comments
0 comments
Please sign in to leave a comment.