Previous Topic: Global User Synchronization

Next Topic: Add Account Templates to Accounts

Create Accounts

Because provisioning roles contain account templates, and account templates are associated to endpoints, a global user should have accounts listed on each endpoint with the correct account attributes.

During the user synchronization process, if CA Identity Manager discovers that a required account does not exist on an endpoint, it creates the account on the endpoint. If more than one account template in the global user's provisioning roles prescribes the same account, the account is created by merging all relevant account templates. This account is assigned to those account templates, which are currently not synchronized with the account. Account synchronization is not necessary on newly created accounts.