Identity and Active Directory Management

[BradG]

We want to workflow approve additions to certain groups, but not deletions from them. When you add a group to a group, is it possible to perform workflow approval for this? Using the "Before Adding a Member to a Group" option does not recognize adding a group to another group. Not sure that we want to use the more general "Before Updating a Group" option.

[Eugene Pavlov]

Hello Brad,

Using the "Before Adding a Member to a Group" option does not recognize adding a group to another group.

It does. The group to which a new member is added must be included in the activity scope of your Business Rule. Can you post a screenshot of your Business Rule?

[BradG]

I've attached an example. Thanks for looking at this...

[Eugene Pavlov]

I cannot see any attachments...

[BradG]

Let's try this. I tried to upload a pdf file...

Business Rule - Group to Group Workflow Example

Group to Group Workflow Sample.JPG (240.58 KiB) Viewed 402 times

[Eugene Pavlov]

Brad,

The Business Rule looks good. I guess the condition isn't met.

• Please make sure that the Description property of the group CO-Geological-Services doesn't contain 'autopopulated' and doesn't start with '[Delegated]'.
• Also, please try to add a group to the CO-Geology-Southern group.
• Or just remove the conditions and try to add a group to the CO-Geological-Services group.