Mapping attribute reference

This article contains information on target account attributes whose configuration is not self-evident.

Active Directory attributes

MembershipCreate function

The MembershipCreate function is designed to grant group memberships on a one-off, ad-hoc basis when it is not possible to use Roles.

For more information, see Mappings vs. roles.

Table 7. Attributes

Name	Value Specification
group	The objectGUID of the Active Directory group to which the member should be added.
member	The objectGUID of the Active Directory user to add to the group.

MembershipDelete function

Table 8. Attributes

Name	Value Specification
group	The objectGUID of the Active Directory group from which the member should be removed.
member	The objectGUID of the Active Directory user to remove from the group.

Windows file system attributes

FolderCreate function

Table 9. Attributes

Name	Value Specification
AccessProfile1 ...(2,3)	The objectSid of the Active Directory user who should be assigned to this home directory.
FullName	The full path of the home directory that should be created, e.g., C:\HomeFolders\bgreene. Typically stored in & mapped from the homeDirectory attribute of the Active Directory user.

Example:

FolderUpdate function

Table 10. Attributes

Name	Value Specification	Mode
AccessProfile1 ...(2,3)	The objectSid of the Active Directory user who should be assigned to this home directory.	- add-only: Adds to existing permissions without overwriting them - copy: Overwrites existing permissions

Example: