Selective deprovisioning
The term deprovisioning is often used when talking about deleting objects in some CDS (Connected Data Source). But deprovisioning is much more than just that.
Carol Wapshere has written a great article explaining our options about deprovisioning. Go to http://aka.ms/FIMDeprovisioning and read it before you start using the option to deprovision.
A typical scenario related to what we have discussed in this book may be that we would like FIM to delete obsolete distribution groups in Active Directory based on some policy. But we do not want FIM to delete users or security groups in AD even if some FIM administrator makes a mistake in the FIM Service configuration.
We need to use code to make the decision.
On the Configure Deprovisioning ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access