Properties web action (Active Directory users)

Limit scope to this Domain or OU

This setting is deprecated.

Maximum SamAccountName length

Cayosoft Administrator has 20 characters limitation as this is Microsoft recommendation for backward compatibility. For more details, please see this article: https://msdn.microsoft.com/en-us/library/ms679635(v=vs.85).aspx

This is not a hard limit and you can increase the maximum number of allowed characters using Cyosoft Administrator Attribute Policy.

More Options

Domain Controller 

Credentials

Override Active Directory domains

Show Ticket input field

Show Comment input field

For the information about these settings, please refer to the More Options description in New User web action.

Allow membership changes for these groups

Specify the groups for which membership changes are allowed: Any group listed on the form or Only from groups located in the Admin Unit scope and Additional scopes.

If you have a set of AD groups that are managed centrally and you do not want to delegate Admin Unit administrators permission to remove accounts from these groups, set this setting to Only from groups located in the Admin Unit scope and Additional scopes. You might also need to set the Additional Scopes setting on the AD Users web query.

For details please see How to allow membership changes only for groups located in the Admin Unit scope and Additional scopes KB article.

Other Attributes

Other Attribute 1 - Other Attribute 20

If you use Active Directory extension attributes to store additional information for user accounts, you could select these attributes and map them to Other Attributes.

To set labels or default values for these attributes, please use Attribute Policies.

Virtual Attributes

Virtual Attribute 1 - Virtual Attribute 25

Virtual Attributes allow extending the attribute list for users in Active Directory without extending the Active Directory schema.

Select the virtual attributes from the list and map them to Virtual Attribute 1 - Virtual Attribute 25.

For more details, please see Configuring Virtual Attributes article.

DynamicAttribute Mapping

Data Source

Separator used in file

Column name > Attribute Mapping (optional)

If the user's properties depend on its organizational unit, then when creating a new user in Web Interface, it would be convenient to populate the default attribute values such as Department, Office, etc depending on the user's organizational unit. Dynamic Attribute Mapping solves this problem.

For configuration, please see Dynamic attribute mapping in Web Interface article.