Rule description
When to use this rule
Use this rule when you create a new linked mailbox in the federated domain and schedule to run it hourly. In this case, when this rule runs, it will check whether the user account was already created in Microsoft Office 365 and if it was, assigns the specified Office 365 license plans and options.
The licenses can be specified in this rule itself or during new user creation. You can specify the way how the Office 365 licenses and options will be assigned in New User with Linked Mailbox or New Linked Mailbox web actions in Hybrid License Options section.
Rule configuration:
-
Query section: limit the query scope and set the query criteria
-
Action section: specify license options to enforce remotely linked mailboxes
- Select Ignore option next to the plans you want to exclude from the rule execution and preserve its current assignment state on users.
Query Section
| Setting name | Description |
|---|---|
| General Settings | |
|
Limit AD scope to this domain or OU |
This setting defines the search query scope. To improve query performance, limit the scope to specific OU. Important: To test rule configuration, limit the rule scope to an OU that contains test accounts or objects.
|
|
AD query criteria |
Query criteria are sent with the query and may improve query performance. Tip: For different samples on the criteria builder, see KB20180410-1.
|
|
Filter AD query results |
To hide unwanted data based on criteria, not supported by Active Directory query, set the filtering conditions here. Example: filter by the found object Distinguished Name. Tip: For optimal performance, use the Query criteria above to filter objects whenever possible.
|
|
Apply to users created in last hours |
Specify the number of hours. |
|
Filter Office 365 query results |
To hide unwanted data returned by the query, set the filtering conditions. |
|
More options |
|
|
Returned properties |
To display additional Office 365 properties for each object found by the query, add those properties to the list. |
|
Sort by |
Sort result objects list. |
|
Exclude disabled users from hybrid mapping |
Excluding disabled AD user accounts from the hybrid mapping is possible. |
|
Maximum number of users |
By default, all objects that you have provisioned in Microsoft Office 365 are returned. Tip: It is possible to change the default value in Microsoft Office 365 extension settings.
|
|
Stop rule if errors exceed |
Too many errors may indicate rule misconfiguration or problems with connectivity. Set this value to some integer value, indicating the number of occurred errors, when the rule execution should stop. |
|
Stop rule if tenant licensing change detected |
It is recommended to stop the rule execution if a tenant licensing change is discovered. Tip: If licensing change is detected, you should click Update License in Microsoft Office 365 extension. For details, see KB20181017-1.
|
|
Domain controller |
Specify the domain controller to run the rule. |
|
Credentials |
Specify credentials for connection to domain controller selected above. |
|
Initialization script |
|
|
Script |
Usually, rules use query criteria to limit the query search scope. It improves the performance of the executed rule. Due to PowerShell limitations, it is not possible to use calculated expressions in query criteria. That is the point where the initialization script can help. You can initialize a global variable in this setting and then use it in query criteria. Important: To use a variable, declared in the initialization script, in the query scope, it must be global: $global:<variable name>.
|
Action Section
| Setting name | Description |
|---|---|
|
License options |
Select which Microsoft Office 365 license plans and options to assign or revoke to Office 365 user accounts. Tip: You could use Ignore option to exclude the plan from the rule entirely. In this case, this plan and its options won't be taken into consideration at all. Those users that have this plan and options assigned would preserve the plan and options. Those users that don't have this license plan and options assigned would preserve that state.
|
|
License update order |
Select a method to assign selected license plans and options:
Note: In most cases Revoke Previous then Assign New option should be used. Please contact Cayosoft support before changing the default value.
|
|
Enforce license precedence (Advanced) |
For details, see KB20181026-1.
|
|
Change UsageLocation only if not set |
Specify whether to keep the current user's usage location or change it to a new one. |
|
Usage Location |
Select the usage location. Important: If Office 365 user accounts don't have a location attribute set, Office 36 license won't apply to them, and the rule will stop with the error. If you use Usage Location from AD value for this setting, you must be sure all Active Directory user accounts, that fall under this rule this, have a location attribute set. |
Output Section
This section defines the output format of this rule.
To get more information about this section, please see the Output section article.
Enforce/Schedule section
This section defines the schedule for how often to run the rule.
To get more information about this section, please see the Enforce/Schedule section article.
Change History
| Version | Notes |
|---|---|
| 6.2.0 |
The rule description is added. |
Comments
0 comments
Please sign in to leave a comment.