Policy: Turbot > IAM > Group Profile > LDAP Synchronization

LDAP synchronizaton for Group Profiles enables synchronization of LDAP Groups in certain intervals of time from Active Directory.

The policy can be set on the LDAP Directory as a whole, or on individual Groups Profiles if exceptions are needed.

Resource Types

This policy targets the following resource types:

Turbot > IAM > Group Profile

Controls

Turbot > IAM > Group Profile > LDAP Synchronization

Policy Specification

Schema Type	`string`
Default	`Skip`
Valid Values [YAML]	`Skip` `Check: Active` `Enforce: Active` `Enforce: Delete inactive with 1 day warning` `Enforce: Delete inactive with 3 days warning` `Enforce: Delete inactive with 7 days warning` `Enforce: Delete inactive with 14 days warning` `Enforce: Delete inactive with 30 days warning` `Enforce: Delete inactive with 60 days warning` `Enforce: Delete inactive with 90 days warning` `Enforce: Delete inactive with 180 days warning` `Enforce: Delete inactive with 365 days warning`
Examples [YAML]	`Check: Active`

In Your Workspace

Policy Settings by Type report

Developers

Category URI

tmod:@turbot/turbot#/control/categories/iam

Policy Type URI

tmod:@turbot/turbot-iam#/policy/types/groupLdapSynchronization

GraphQL

query policyType(id: "tmod:@turbot/turbot-iam#/policy/types/groupLdapSynchronization") { … }

query policySettings(filter: "policyTypeId:'tmod:@turbot/turbot-iam#/policy/types/groupLdapSynchronization'") { … }

query policyValues(filter: "policyTypeId:'tmod:@turbot/turbot-iam#/policy/types/groupLdapSynchronization'") { … }

CLI

Get Policy Type

turbot graphql policy-type --id "tmod:@turbot/turbot-iam#/policy/types/groupLdapSynchronization"

Get Policy Settings

turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/turbot-iam#/policy/types/groupLdapSynchronization"