System Center Service Manager:Active Directory Connector

The System Center Service Manager:Active Directory Connector is a built in System Center Service Manager:System Center Service Manager connector that enables User and Groups: Users and Groups sync from Authentication:Active Directory. This enables systems administrators to map Active Directory Users and groups to built in and custom System Center groups.

The following groups are built into System Center Service manager:

1. Activity Implementers: Can read, create, and update activities.
2. Administrators: Have full permissions, including creating, updating, and deleting configuration items and other records.
3. Advanced Operators: Can read, create, and update configuration items, but cannot delete them.
4. Change Initiators: Can create and manage change requests.
5. End Users: Typically have read-only access to self-service features and can submit requests.
6. Read-Only Operators: Have read-only access to most areas.
7. Authors: Can create and manage knowledge articles and other documentation.
8. Problem Analysts: Focus on managing problem records.
9. Workflows: Automate processes and may have broad read/write permissions depending on workflow needs.
10. Incident Resolvers: Manage incident records.
11. Change Managers: Oversee change management processes.
12. Report Users: Access and run reports (available after registering with the data warehouse).
13. Release Managers: Handle release management.
14. Service Request Analysts: Manage service requests.

You can learn more about groups via Microsoft's website: Manage Service Manager user roles and User role profiles in System Center - Service Manager if you require additional implementation instruction outside of my use case and scope.

Deployment

Follow the instructions listed below to configure a working instance of the System Center Service Manager Active directory connector:

1. Open the Service Manager console as a domain administrator. Navigate to the Administration Tab, Click Connectors, then click Create connector and select the Active Directory Connector. The Active Directory Connector Wizard should launch.
   1. On the Before You Begin tab, click Next
   2. On the General page, give your connector a name, description, and ensure the connector is enabled. In my case, I am using "Internal Active Directory Connector" as both the name and description.
   3. On the Domain or Organizational Unit page, Choose to sync the entire domain or an OU. Multiple Active Directory connectors can be used to sync only specific OUs. I cannot justify this in my environment, but you might. In my case, I am choosing to sync the entire directory. I will be managing this through Active Directory Users and Computers, anyway