Forum Discussion

kacper808's avatar
kacper808
Copper Contributor
Apr 28, 2020

Organisation Chart Setup with Azure AD

I have been trying to set up the "Organisation" tab view for an org through the setting of the "manager" property for users. It has been fairly simple through exchange so far but I've hit a bit of a block and I'm not sure if what I'm attempting is possible.

 

Some of the users have Azure AD profiles that are sync'ed from an on-prem AD, and so their manager attribute could only be set to another account in that same AD. This meant that managers who's accounts are cloud based could not be set for some of the on-prem sync'd users.

 

I assumed this could be solved by changing the https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-install-custom#azure-ad-app-and-attribute-filtering in the Azure AD Connect configuration to remove that attribute from the sync to Azure AD, then I could change the setting through Azure AD to the Object ID of the intended manager even if they are cloud only accounts. This however still doesn't let me edit the "manager" attribute.

 

Would appreciate if someone could show me my error or a limitation of the system that I am not aware of, thanks.

1 Reply

  • In any configuration involving synced users, this attribute must be managed on-premises. If the user you want to designate as manager is cloud-only, you can create a representation of it (a matching user object) on-premises, although that might affect the way he's authenticating to the service(s).

Resources