AAD Connect-冲突的多个AD林成员 [英] AAD Connect - Multiple AD Forests memberof Conflict
问题描述
下午所有时间,
只想确认一下,当AAD Connect(默认配置)匹配(邮件属性)时,对象是属性的member成员还是根据优先级替换的对象?例如:
Just wanted to confirm, when AAD Connect (Default Config) Matches (mail Attrib) an object is the memberof attribute additive or replaced based on precedence? For example:
森林A
邮件联系人MemberOf -eq DL_FORESTA
森林B
用户邮箱成员-eq DL_FORESTB
AZURE AD
用户邮箱成员-eq DL_FORESTA; DL_FORESTB
或
用户邮箱成员-eq DL_FORESTB&s
推荐答案
或 . 同步规则具有一个优先级值,指示它们如何相互关联.数值较小的同步规则具有较高的优先级,并且在属性流冲突中,较高的优先级将赢得冲突的解决.
A Synchronization Rule is a configuration object with a set of attributes flowing when a condition is satisfied. It is also used to describe how an object in a connector space is related to an object in the metaverse, known as join or match. The Synchronization Rules have a precedence value indicating how they relate to each other. A Synchronization Rule with a lower numeric value has a higher precedence and in an attribute flow conflict, higher precedence wins the conflict resolution.
检查链接以了解默认配置
Check the link to understand the default configuration
https://docs.microsoft.com/zh-cn/azure/active-directory/connect/active-directory-aadconnectsync-understanding-default-configuration#synchronization-rule
https://docs.microsoft.com/en-us/azure/active-directory/connect/active-directory-aadconnectsync-understanding-default-configuration#synchronization-rule
这篇关于AAD Connect-冲突的多个AD林成员的文章就介绍到这了,希望我们推荐的答案对大家有所帮助,也希望大家多多支持IT屋!