Directory Services › Create User Operator › Input Parameters

Input Parameters

User Account Path

Specifies the distinguished name of the object under which you want to create the new user account.

First Name

Specifies the first name of the user.

Middle initials

Specifies the middle initials of the user. Note that Active Directory does not allow middle initials to be over six characters long.

Last name

Specifies the last name of the user.

UserID

Specifies the user ID for the user.

Password

Make sure you specify a password that conforms to the Password Policy Requirements set in your LDAP server, especially for an Active Directory Server.

Active Directory?

Check if you are creating the new user account in an Active Directory server.

Create UserID as User Logon Name

Specifies whether you want the UserID to also be the user's logon name. In this case, create a User Logon Name of the form "UserID@domain" where domain represents the Active Directory's Domain. This field is enabled only when the Active Directory? field is checked.

Enable user?

Select yes to make the new user active or no to make the new user inactive. This field is enabled only when the Active Directory? field is checked.

Password Expires for User

Select whether the user password expires as per the Domain Policy or Never expires. This field is enabled only when the Active Directory? field is checked.

When the user password is set to never expire, you are not be forced to change a password at the first logon.

Password Change at First Login?

Forces the User to change password at first logon, this option is applicable only when the password is chosen to expire. Note that the user could set the combination Password to not expire and Password change required at first login. In this case, CA Process Automation sets the password to not expire and ignores the password change at first login request. This field is enabled only when the Active Directory? field is checked.

Note that Active Directory will not allow for a user's password to be set unless CA Process Automation is connected to the Active Directory server through SSL. If CA Process Automation is not connected through SSL, the user account will be created without a password and without the specified account controls (account enabled/disabled, password expiration, password change at logon) and the operation will fail in CA Process Automation.

See the topic Add an SSL Certificate to CA Process Automation to find out how to import an Active Directory certificate to CA Process Automation. Once the certificate is imported, you can change the Directory Services category's properties to establish an SSL connection with the Active Directory server.