CreateUsersAndGroupFromBaseGroup
Description
Searches a section of the LDAP directory and imports all groups found — together with their members — into TIM Flow. Groups are created or updated automatically using the LDAP group names. This allows an entire branch of the directory to be mirrored into TIM Flow without configuring each group individually.
Webservice Name | Webservice Method |
|---|---|
IdentityManager | createUsersAndGroupFromBaseGroup |
Parameters
Parameter | Description | Valid examples |
|---|---|---|
DN-path from the LDAP | The base DN from which the timer searches for groups. All groups found at or below this path are imported into TIM Flow. Unlike | OU=LDAP-Wiki,DC=system,DC=local |
Maximum members per group | Groups with more members than this value are skipped during the sync. Useful to exclude large distribution lists or organisation-wide groups that should not be imported. Set to | 0 |
Unused parameter | Set to | 0 |
Unused parameter | Set to | 0 |
Roles are not assigned as a parameter. Unlike CreateUsersFromLdapGroup, this timer does not take a roles parameter. The groups created in TIM Flow mirror the LDAP group names, and role assignments must be managed separately within those groups.
If ldapUserExpiredAction is set to Deactivate or Delete, a notify-on-error group with a valid email address must be configured in the tenant profile before this timer will run. Without it, the timer throws an error and skips the sync entirely. (How to configure)
Examples
Import all groups under the base DN, skipping any group with more than 500 members:
"OU=LDAP-Wiki,DC=system,DC=local","500","0","0"Import all groups under the base DN with no member limit (all groups processed regardless of size):
"OU=LDAP-Wiki,DC=system,DC=local","0","0","0"Import from a more specific organisational unit, skipping groups larger than 200 members:
"OU=Departments,OU=LDAP-Wiki,DC=system,DC=local","200","0","0"