How to handle changes to a user pending approval after a user is moved

Question

Hello!

We have a business rule in place that will request approval from a group's owner before adding an account to that group for certain groups. We also have a custom command for creating new accounts that occaisionally involves adding the new account to these groups, which results in the approval request being sent to the owner. Later on in another custom command run on the new account, the account is moved to a new OU. This works as expected most of the time.

We're running into problems though when the approvers take too long to respond to the approval request and the second command is run before they respond, meaning the account is moved before it is added to the group. This results in an error when the operation is executed: [Error] The name reference is invalid.

Do you have any ideas for how to get around this error?

Comments

Hello,

Could you, please, specify how exactly users are added to groups? If it is done using a script, please, post it here or send to support@softerra.com in TXT format.

Also, please, specify the version of Adaxes you are using. For information on how to check that, have a look at the following help article: https://www.adaxes.com/help/CheckServiceVersion.

---

The users were added to the groups using the following script snippet where $username is the username of the new account and $groups is a string array of distinguished names of the groups: Add-AdmPrincipleGroupMembership -Identity $username -MemberOf $groups -AdaxesService "localhost" We are using version 3.14.18804.0 (64 bit).

---

Hello,

As per our check, using the script you provided works fine. After approving the requests, users get added to the groups without any error messages. For further troubleshooting, please, provide us with the following details:

• A screenshot of the error you are facing. You can post it here or email at support@adaxes.com.
• The full script that adds users to groups. You can post it here or email at support@adaxes.com.
• What version of Adaxes are you currently using? For information on how to check it, have a look at the following help article: https://www.adaxes.com/help/CheckServiceVersion.

---

I did another test, and you're right. The user was added successfully to the group.

It looks like the issue we're having is actually coming from a business rule that updates a property whenever an account is added to the group. I've updated the business rule and it works now.

Thanks for your help and sorry for the confusion!