22.1 Modifying other users

To modify accounts or to request modifications for other users:

1. On the select recipient menu, click Existing user, Somebody else, or Myself.

2. If required, type search criteria and click Search.

3. If required, click Update to select the user whose accounts you want to modify.

   ID-Synch displays the User information page.

4. Carry out modifications as described in the rest of this section.

5. If you are a console user or authorizer with appropriate rights, ID-Synch makes the changes and displays the results. Click Back to return to the user's information page.

6. If you are a requester, ID-Synch displays the Group change request information page.
   1. Type the e-mail address you want to be contacted at, and the e-mail address of the recipient if necessary.
   2. Type notes in the Notes on request field if required. The information provided may expedite the request because authorizers see these notes when reviewing requests.
   3. Click Finish
   ID-Synch issues the request, and displays the Request status page with a link to check the request status in the Request tracking module (nph-ids.exe).

22.1.1 Disabling and enabling accounts

If users temporarily leave and accounts need to be frozen, disable the account and enable it when the user returns.

Click the check box next to the accounts you want to change, then click Disable or Enable as required.

22.1.2 Updating attributes

You can update attributes such as last name, or any request attributes configured in ID-Synch, by clicking Update.

22.1.3 Deleting accounts

Delete an account if the user has left permanently or no longer requires the account.

Caution:

On almost every agent, this operation is permanent and all the user's information is lost. A more prudent course of action would be to disable the user, recover any data the account may have, then delete the account at a later date.

Click the check boxes next to the accounts you want to delete, then click Delete.

22.1.4 Managing a user's account group membership

ID-Synch uses account groups to configure ways to manage membership of corresponding groups on the following target systems:

• Windows 2000
• Windows NT
• Novell NDS
• Lotus Notes ID
• Unix
• SAP

To manage a user's membership of account groups:

1. On the user's User information page, click the check box next to the accounts you want to manage, and click Manage groups.

   ID-Synch displays the Select groups to join/leave page. If the user is a member of a group, a check is displayed in the Member? column.

   • If the user is a member of a group, a check is displayed in the Member? column.

   • The Join/Leave type column displays:

     Open

     if the user can be added or removed at any time

     Moderated

     if the user can be added or removed if approved by an authorizer

     Open to members of another group

     if the users can be added only if they belong to another managed group on the same or another target system

2. Change the account's group membership status as required.

3. Click Update.

22.1.5 Moving accounts to another directory

Account management console (nph-ida.exe) users can move users' accounts between directories on context targets such as LDAP, NDS, and Windows 2000, without affecting other account properties:

1. On the user's User information page, click the check box next to the accounts you want to move, and click Move.

2. Select the destination context from the drop-down list next to each account.

3. Click Move