Configure provisioning options
The tool can synchronize groups only if the user accounts in Microsoft Active
Directory have matching user accounts on the BlackBerry Device Service. If matching user accounts do not exist on the BlackBerry Device Service, you can add the user accounts manually using the BlackBerry Administration Service, or you can enable the provisioning feature so that the tool can add user accounts
during the synchronization process. For more information about provisioning and
deprovisioning rules, visit www.blackberry.com/go/serverdocs to read the
BlackBerry Resource Kit for the BlackBerry Device Service Administration
Guide.
- On the computer that hosts the BlackBerry Directory Sync Tool, on the taskbar, click Start > All Programs > BlackBerry Resource Kit for BlackBerry Device Service > BlackBerry Directory Sync Tool client.
- In the BlackBerry Group Search section, click Configure.
- In the Provisioning Options section, select Enable user provisioning with virtual provisioning mappings.
-
If you want the tool to manage the removal of user accounts from the BlackBerry Device Service, select Enable user de-provisioning when removed
from provisioning mappings. In the De-provisioning Warning dialogue box, click Yes. In the De-provisioning action drop-down list, perform one of the
following actions:
- If you want the tool to remove user accounts from the BlackBerry Device Service if they do not exist in Microsoft Active Directory groups that are mapped to virtual provisioning groups, click Delete users.
- If you want the tool to identify in the report and the log file the user accounts that should be deleted, and you do not want the tool to delete the user accounts, click Log only. Use the information in the report or log file to remove the user accounts using the BlackBerry Administration Service.
- Click Save.
Configure mappings between Microsoft Active
Directory groups and virtual provisioning groups.
Was this information helpful? Send us your comments.