Auto Provisioning Jobs

Provisioning allows admins to auto-sync Pyramid's user accounts with security groups defined in Microsoft Active Directory. The engine runs periodically and provides a fast, automated and convenient method for synchronizing users in Pyramid with Active Directory.

Note: Provisioning is only active when Active Directory authentication is used.

Note: This feature is only available in the Enterprise Edition.

  • Use the Task Manager to see a listing of all provisioning tasks in a single listing.

Schedule Listing

The Auto Provisioning Jobs page lists all the scheduled provisioning jobs.

It displays the time until the next scheduled job. To run all jobs immediately, click the "Immediate Jobs Launch" button.

Each auto provisioning job listed displays:

  • Actions: from here you can edit the schedule, delete it, show the schedule's cached list, or clear the cached list.
  • Domain: the Pyramid domain.
  • AD Group: the AD group to sync.
  • License: the license type given to the users of the AD group.
  • Tenant: the tenant the users will belong to.
  • Role: the role the users will be assigned to.
  • Profile: the role the users will be assigned to.
  • Admin Type: the admin type that will be given to the users.

Add New Provisioning Jobs

Click the add new job button to add a new provisioning task to the system in the New Schedule dialog:

  • Group Name: select the AD group that will form the member source for this task
  • License Type: choose the license type that will be allocated to the users generated from this task
  • Tenant: choose the tenant the users should belong to
  • Role to Add: select which role the users will be added to
  • Admin Type: Select which Admin type the users should have
  • Profile: select the Profile the users should be assigned to. Profiles are configured under Access, in the Profiles tab, and determines what actions users can and can't perform

Click the save button to commit the task.

Grant Domain Admin Rights

Pyramid supports two Admin types: Enterprise Admins and Domain Admins. While Enterprise Admins have complete access to the entire system and its settings, Domain Admins are granted access to specified parts of the system. In a multitenant environment, Domain Admins are limited to actions WITHIN the tenancy they belong to, while Enterprise Admins can work across tenants.

Depending on your method of importing users, Domain Admin rights can be assigned from Users or from Auto Provisioning Jobs.

When the Admin type for a provisioning job is set to Domain Admin, the list of Admin Rights will appear.

  • Click here for details about Domain Admin Rights.