Assign Create Profiles

Once "Create Forms" have been built and configured, "Create Profiles" can be created and assigned to groups. Typically, you create "Profile Folders" that contain the "Profiles" that you build.

Table of contents

• Organizing Profile Folders
• Building Create Profiles
  • eDirectory Group Create Profile
  • eDirectory User Create Profile
  • Use "Copy Profile" to Create a New eDirectory User Create Profile
  • Active Directory Group Create Profile
  • Active Directory User Create Profile
  • Use "Copy Profile" to Create a New Active Directory User Create Profile

Organizing Profile Folders

There can be a considerable number of create profiles required to support a mixed network environment. Typically, create profiles are contained in folders that match the "OU" structures used throughout a network environment. In our sample environment, we use "OU" structures that identify the cities where ACME operate offices. Some cities are eDirectory only, some cities are AD only and some cities have a mix of eDirectory and AD groups and users.

To create a profile folder:

1. In the "Create" page of the Administration panel, right-click the "Profiles" folder in the "Profiles" pane and select New Folder...
2. In the "New Profile Folder" window provide a name for the folder and a description (optional).
3. Click the Add button.
4. When all the profile folders are created, click the Apply New Settings button to save the folders.

Building Create Profiles

With eControl, you can build and assign group and user create profiles. With each type of profile, you will need the following information:

• The target "System" (Directory)
• The create form to be used
• The source object that will serve as a template
• The container in the target "System" where the group or user will be created

In our example network, we will be building create profiles in the Berlin location which hosts a mixed eDirectory/GroupWise and AD/Exchange environment.

eDirectory Group Create Profile

To build an eDirectory group create profile:

1. Right-click a profile folder and select New Profile...
2. In the "New Profile" window under the "Settings" tab:
   • Provide a suitable "Name:" e.g. eDir Berlin Group Create Profile
   • Select the target eDirectory tree for the "System:"
   • (Optional) Provide a brief description
   • Select the "Master Form:" create form, e.g. Group (eDirectroy)
   • Click the "Template Context:" browse button, navigate the target eDirectory tree and select the desired template group object (Note - it is recommended that you use group objects with an empty membership list. If you select a group with a populated membership list, the new group will have the same membership list.)
   • Click the "Creation Context:" browse button, navigate the target eDirectory tree and select the desired container where new group objects will be created when using this profile.
3. Under the "Assign Groups" tab click the Add new button.
4. In the "Add Search Context" window:
   • Use the "System Name:" drop-down button to select the target system that contains the group that will be assigned to this profile.
   • Click the "Group Context:" browse button, navigate the target system and select the group that will be permitted to create group objects using this profile (assigned to this profile).
   • Click the Add button.
5. Repeat step 4 to add additional groups until all desired groups have been assigned.
6. Click the Add button to save the profile.
7. In the "Create" page of the Administration panel click Apply New Settings to save new profiles and profile assignments.

eDirectory User Create Profile

To build an new eDirectory user create profile:

1. Right-click a profile folder and select New Profile...
2. In the "New Profile" window under the "Settings" tab:
   • Provide a suitable "Name:" e.g. eDir Berlin Accounting User Create Profile
   • Select the target eDirectory tree for the "System:"
   • (Optional) Provide a brief description
   • Select the "Master Form:" create form, e.g. eDir Users (DEMO2-TREE)
   • Click the "Template Context:" browse button, navigate the target eDirectory tree and select the desired template user object.
   • Click the "Creation Context:" browse button, navigate the target eDirectory tree and select the desired container where new user objects will be created when using this profile.
3. Under the "Assign Groups" tab click the Add new button.
4. In the "Add Search Context" window:
   • Use the "System Name:" drop-down button to select the target system that contains the group that will be assigned to this profile.
   • Click the "Group Context:" browse button, navigate the target system and select the group that will be permitted to create group objects using this profile (assigned to this profile).
   • Click the Add button.
5. Repeat step 4 to add additional groups until all desired groups have been assigned.
6. Click the Add button to save the profile.
7. In the "Create" page of the Administration panel click Apply New Settings to save new profiles and profile assignments.

Use "Copy Profile" to Create a New eDirectory User Create Profile

To build an new eDirectory user create profile:

1. Right-click an existing user profile and select Copy Profile
2. Right-click the (copy) user profile object just created and select Edit Profile
3. In the "Edit Profile" window under the "Settings" tab:
   • Change the existing "Name:" e.g. eDir Berlin Marketing User Create Profile
   • Click the "Template Context:" browse button, navigate the target eDirectory tree and select the desired template user object.
4. Under the "Assign Groups" tab click the Add new button:
   • Delete any existing groups that will not be assigned to this profile.
   • Add additional groups that will be assigned to this profile.
5. Click the Save button to save the profile.
6. In the "Create" page of the Administration panel click Apply New Settings to save new profiles and profile assignments.

Active Directory Group Create Profile

To build an Active Directory group create profile:

1. Right-click a profile folder and select New Profile...
2. In the "New Profile" window under the "Settings" tab:
   • Provide a suitable "Name:" e.g. AD Berlin Group Create Profile
   • Select the target Active Directory domain for the "System:"
   • (Optional) Provide a brief description
   • Select the "Master Form:" create form, e.g. Group (Active Directory)
   • Click the "Template Context:" browse button, navigate the target Active Directory domain and select the desired template group object (Note - it is recommended that you use group objects with an empty membership list. If you select a group with a populated membership list, the new group will have the same membership list.)
   • Click the "Creation Context:" browse button, navigate the target Active Directory domain and select the desired container where new group objects will be created when using this profile.
3. Under the "Assign Groups" tab click the Add new button.
4. In the "Add Search Context" window:
   • Use the "System Name:" drop-down button to select the target system that contains the group that will be assigned to this profile.
   • Click the "Group Context:" browse button, navigate the target system and select the group that will be permitted to create group objects using this profile (assigned to this profile).
   • Click the Add button.
5. Repeat step 4 to add additional groups until all desired groups have been assigned.
6. Click the Add button to save the profile.
7. In the "Create" page of the Administration panel click Apply New Settings to save new profiles and profile assignments.

Active Directory User Create Profile

To build an new Active Directory user create profile:

1. Right-click a profile folder and select New Profile...
2. In the "New Profile" window under the "Settings" tab:
   • Provide a suitable "Name:" e.g. Berlin AD Auditors User Create Profile
   • Select the target Active Directory domain for the "System:"
   • (Optional) Provide a brief description
   • Select the "Master Form:" create form, e.g. AD Users (Omni2003.local)
   • Click the "Template Context:" browse button, navigate the target Active Directory domain and select the desired template user object.
   • Click the "Creation Context:" browse button, navigate the target Active Directory domain and select the desired container where new user objects will be created when using this profile.
3. Under the "Assign Groups" tab click the Add new button.
4. In the "Add Search Context" window:
   • Use the "System Name:" drop-down button to select the target system that contains the group that will be assigned to this profile.
   • Click the "Group Context:" browse button, navigate the target system and select the group that will be permitted to create group objects using this profile (assigned to this profile).
   • Click the Add button.
5. Repeat step 4 to add additional groups until all desired groups have been assigned.
6. Click the Add button to save the profile.
7. In the "Create" page of the Administration panel click Apply New Settings to save new profiles and profile assignments.

Use "Copy Profile" to Create a New Active Directory User Create Profile

To build an new Active Directory user create profile:

1. Right-click an existing user profile and select Copy Profile
2. Right-click the (copy) user profile object just created and select Edit Profile
3. In the "Edit Profile" window under the "Settings" tab:
   • Change the existing "Name:" e.g. Berlin AD Developers User Create Profile
   • Click the "Template Context:" browse button, navigate the target Active Directory domain and select the desired template user object.
4. Under the "Assign Groups" tab click the Add new button:
   • Delete any existing groups that will not be assigned to this profile.
   • Add additional groups that will be assigned to this profile.
5. Click the Save button to save the profile.
6. In the "Create" page of the Administration panel click Apply New Settings to save new profiles and profile assignments.

---