nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Portal users with Active Directory Not Removing From Group

BrianLeroux

I have groups link to AD domain groups. When a new user is added to the AD group, they show up in the Portal group. However, when they get removed from that AD group, they are not getting removed from the group. Is that expected behavior? I do understand that they would still have a portal account as accounts need to be removed manually but I was hoping to have them removed from the groups as it is retaining access to services they should not be allowed to access any longer.

It seems like removing them from an AD group but putting them in other does work and removed them from one portal group and add them to the other.

Trouver plus de publications taguées avec

Accepted answers

RClavero

Hello @BrianLeroux, you might want to check this old Esri Community post. In which this doc is referred; I added the latest version of it.

All comments

BrianLeroux

Yes it did @BillFox. Thank you and @RClavero for the info.

BillFox

does it look like it is supposed to after midnight?

BrianLeroux

HI @RClavero , I did read through that but I think my situation is a bit different. I am only looking to make sure users are being removed from groups. Interestingly enough I was able to get the removals to sync between AD and Portal just now. It seems like I had to trigger the process though. I went into the Portal REST Sharing endpoint and searched for the group I wanted to refresh. Choose the "Update Group" option. Did not change any settings but just clicked the "Update Group" button to save. Moments later I saw users start dropping from the group user list. Seems strange that I would have to do this.

After further testing, users will show in the portal group even though they are removed in AD until they log into the system. Seems like the login forces and AD lookup to refresh the user. Wish there was a way to do a bulk refresh.

RClavero

Hello @BrianLeroux, you might want to check this old Esri Community post. In which this doc is referred; I added the latest version of it.

Rejoindre la conversation

Les membres connectés peuvent publier, suivre les mises à jour, et plus encore. Nouveau ici ? Inscrivez-vous gratuitement.

Liens rapides

Community Help
Find useful guides, FAQs, and documents to help you navigate and make the most of Esri Community.