Portal MPRs for user management
There are many MPRs in MIM Service that control how user objects can be modified by self-service, administrators, or the synchronization engine.
In many cases, we need to modify the existing MPRs and/or create new ones. Whether we use the existing MPRs or decide to create new ones is something you can decide as you wish. In this book, we will reuse many of the built-in MPRs, and add new ones when needed.
Before we can start our user management, it is a good idea to look at the existing MPRs and try to understand what they do. If we go into MIM Portal, select Management Policy Rules, click on Advanced Search, and search for Display Name contains user, we will get around 26 MPRs (many are regarding group management) ...