Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -15,4 +15,7 @@ Directory Manager provides the following APIs to perform contact-specific functi
- [Get Contacts](/docs/directorymanager/11.1/APIs/contactapis/getcontacts.md)
- [Update a Contact](/docs/directorymanager/11.1/APIs/contactapis/updatecontact.md)

NOTE: The contact object type is not supported in a Microsoft Entra ID based identity store.
:::note
The contact object type is not supported in a Microsoft Entra ID based identity store.

:::
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,10 @@ sidebar_position: 10

Using this API you can create a contact in the specified identity store.

NOTE: The contact object type is not supported in a Microsoft Entra ID based identity store.
:::note
The contact object type is not supported in a Microsoft Entra ID based identity store.
:::


## Endpoint

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,10 @@ sidebar_position: 20

Using this API you can delete a specified contact from the specified identity store.

NOTE: The contact object type is not supported in a Microsoft Entra ID based identity store.
:::note
The contact object type is not supported in a Microsoft Entra ID based identity store.
:::


## Endpoint

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,10 @@ sidebar_position: 30

This API is for deleting multiple contacts from a specified identity store.

NOTE: The contact object type is not supported in a Microsoft Entra ID based identity store.
:::note
The contact object type is not supported in a Microsoft Entra ID based identity store.
:::


## Endpoint

Expand Down
5 changes: 4 additions & 1 deletion docs/directorymanager/11.1/APIs/contactapis/getcontact.md
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,10 @@ sidebar_position: 40

Use this API to retrieve information about a contact in a specified identity store.

NOTE: The contact object type is not supported in a Microsoft Entra ID based identity store.
:::note
The contact object type is not supported in a Microsoft Entra ID based identity store.
:::


## Endpoint

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,10 @@ sidebar_position: 50

Use this API to retrieve information of multiple contacts from a specified identity store.

NOTE: The contact object type is not supported in a Microsoft Entra ID based identity store.
:::note
The contact object type is not supported in a Microsoft Entra ID based identity store.
:::


## Endpoint

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,10 @@ sidebar_position: 60
Use this API if you want to update a contact's attribute(s) and their value(s) in a specified
identity store.

NOTE: The contact object type is not supported in a Microsoft Entra ID based identity store.
:::note
The contact object type is not supported in a Microsoft Entra ID based identity store.
:::


## Endpoint

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -28,8 +28,11 @@ Oracle server or a specific database on a server. This data source can be used i
source and destination provider in Synchronize jobs. This provider supports dynamic schema
detection.

NOTE: Oracle client must be installed to use this provider. Make sure you reboot your computer after
:::note
Oracle client must be installed to use this provider. Make sure you reboot your computer after
installing the Oracle client.
:::


```
{
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -8,8 +8,11 @@ sidebar_position: 20

This API can be used for deleting a specified data source.

NOTE: Deleting a data source corrupts all Synchronize jobs, membership queries, and search queries
:::note
Deleting a data source corrupts all Synchronize jobs, membership queries, and search queries
using that data source.
:::


## Endpoint

Expand Down
5 changes: 4 additions & 1 deletion docs/directorymanager/11.1/APIs/welcome.md
Original file line number Diff line number Diff line change
Expand Up @@ -20,6 +20,9 @@ first and last of these is clear, but `POST` and `PATCH` have specific meanings.
defined is confusing, but the general rule is: use `POST` to create resources, `PUT` and `PATCH` to
update resources.

NOTE: All the APIs documented in the API section are for an Active Directory based identity store.
:::note
All the APIs documented in the API section are for an Active Directory based identity store.
In each API, the **Sample Request Syntax** and the **Sample Response Syntax** sections have
attributes that are supported in an Active Directory based identity store.

:::
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,10 @@ sidebar_position: 50

You can use this API to delete a user-defined workflow route.

NOTE: You cannot delete a system workflow.
:::note
You cannot delete a system workflow.
:::


## Endpoint

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -47,7 +47,6 @@ You can customize the following toolbars:
| Group Member Of Grid | The **Member Of** tab in group properties |
| Direct Reports Grid | The **Organization** tab in user properties |


:::note
The **Computer Members of Grid** and **Contact Member of Grid** toolbars are not available for
a Microsoft Entra ID identity store.
Expand All @@ -64,7 +63,7 @@ can update a few details for a button, such as its name and image.
2. Click the ellipsis button for a portal and select **Settings**.
3. Select an identity store under **Design Settings** to customize the portal for it.
All identity stores linked with the portal are listed under **Design Setting**s. You can design a
different portal for each of these.
different portal for each of these.
4. Click **Toolbars** in the left pane; the **Toolbars** page is displayed.
5. In the **Select Toolbar Type** drop-down list, select the toolbar you want to update.
The **Name** area lists all buttons on this toolbar.
Expand All @@ -85,9 +84,11 @@ can update a few details for a button, such as its name and image.
- If an image has been uploaded, the very image is displayed. Click **Upload** to replace
the existing image with a new one.

**NOTE: Image dimensions: 30 x 30 pixels**
:::note
Image dimensions: 30 x 30 pixels
:::

Supported formats: .webp, .jpg, .jpe, .jpeg
Supported formats: .webp, .jpg, .jpe, .jpeg

8. **Visibility Level** – Select a security role. The toolbar button would be visible to users
of this role and roles with a priority value higher than this role. See
Expand All @@ -104,7 +105,7 @@ can update a few details for a button, such as its name and image.
2. Click the ellipsis button for a portal and select **Settings**.
3. Select an identity store under **Design Settings** to customize the portal for it.
All identity stores linked with the portal are listed under **Design Settings**. You can design a
different portal for each of these.
different portal for each of these.
4. Click **Toolbars** in the left pane.
5. On the **Toolbars** page, select a toolbar in the **Select Toolbar Type** drop-down list.
The **Name** area lists all buttons on this toolbar.
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -55,7 +55,6 @@ You can manage the following advanced settings for a portal:
| Display Groups in My Dynasties | Controls whether to display the Dynasties for which the logged-on user is an additional owner, on the portal’s **My Dynasties** tab. By default, the tab displays the Dynasties that the logged-on user is the primary owner. Enable this setting to include Dynasties for which the logged-on user is an additional owner. Note that this setting applies individually to parent, middle, and leaf Dynasties. |
| Display Additional Manager Direct Reports | Controls whether to display the direct reports for whom the logged-on user is an additional manager, on the portal’s **My Direct Reports** tab. By default, the tab displays the direct reports that the logged-on user is the primary manager. Enable this setting to include direct reports for whom the logged-on user is an additional manager. |


:::note
Individual users can personalize all except the _Display Nested Ownership_ setting from the **Settings** panel in the portal.
:::
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -118,11 +118,12 @@ The next step is to assign permissions on the physical folder that binds to your
```

:::tip
Remember, to provide values for alias "site name" and path "physical folder location of the
Remember, to provide values for alias "site name" and path "physical folder location of the
site", created in the section Create a Site in Remote IIS.
:::



## Generate an Access Key

Admin Center uses the
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -19,7 +19,6 @@ Before configuring Email authentication, make sure that an SMTP server is config
identity store. See the [Configure an SMTP Server](/docs/directorymanager/11.1/admincenter/identitystore/configure/smtpserver.md) topic.
:::


## Enable Email Authentication for an Identity Store

The email authentication type must be enabled for an identity store before users can use it for
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -13,7 +13,6 @@ hardware installed, such as fingerprint reader and 3D camera.
Windows Hello supports the Microsoft Edge browser only.
:::


## Enable Windows Hello on Windows 10

1. On the Windows Start menu, select **Settings**.
Expand Down
2 changes: 1 addition & 1 deletion docs/directorymanager/11.1/admincenter/authpolicy/sfa.md
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,7 @@ authentication types. Supported authentication types are discussed in the
[Authentication Policies - A Comparison](/docs/directorymanager/11.1/admincenter/authpolicy/authpolicy.md) topic.

Once enrolled, role members must authenticate their accounts using an authentication type they
enrolled with, while signing into Admin Center or theDirectory Manager portal. Users enrolled with
enrolled with, while signing into Admin Center or the Directory Manager portal. Users enrolled with
multiple authentication types can use any one type to authenticate.

:::note
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -62,7 +62,6 @@ of IdentityStoreA will apply to the SMS gateway account creation action and that
will apply to the Directory Manager portal creation action.
:::


**Event Logging**

In addition to history tracking, Directory Manager provides event logging, which includes file
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -70,7 +70,6 @@ license is dependent on the Group Usage Service license, which in turn is depend
Management license.
:::


**What happens when your license expires**

When a license expires, its respective functions get read-only but you can configure certain
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -144,7 +144,7 @@ Permissions are discussed in the following table:

:::tip
Remember, Generalized permissions override limited permissions. For example, if Unlock My Account is
denied and Unlock Any Account allowed, role members can unlock all accounts, including their own.
dened and Unlock Any Account allowed, role members can unlock all accounts, including their own.
:::


Expand Down Expand Up @@ -205,7 +205,6 @@ Permissions are discussed in the following table:
| 4. | Modify user / group | Enables role members to update the permissions assigned to users and groups on document libraries in the site. The Type column lists the effective permissions. Role members will only be able to modify the permissions that you enable here. |
| 5. | Remove user / group | Enables role members to remove users and groups from the permission list of document libraries in the site. Removed users and groups will not be able to access the respective document library in the site. |


:::note
For more information on role permissions, see the
[User Roles in Microsoft Entra ID and Directory Manager ](/docs/directorymanager/11.1/admincenter/identitystore/advsentraid.md#user-roles-in-microsoft-entra-id-and-directory-manager)
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -245,7 +245,6 @@ Remember, These settings are available if the _Reset Any Password_ permission is
Helpdesk role in the identity store.
:::


### Specify a Password Reset Method

You can enable helpdesk role members to reset user account passwords by any of the following
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -42,8 +42,11 @@ store for authentication.
Step 7 – Click **Browse** under Identity Provider Image to upload an image for the application, such
as the application logo.

NOTE: Supported image formats: .jpg, .bmp, .webp, and .gif
:::note
Supported image formats: .jpg, .bmp, .webp, and .gif
Image file dimensions: 210 x 60 pixels
:::


Step 8 – Expand the Advanced section by clicking the down arrow head to specify advanced settings
for the application.
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -85,8 +85,11 @@ FS option as an image or as a button.
To display the AD FS option as an image, you have to upload an image for it. On the Create New
Provider page, use the Browse button under Identity Provider Image to upload an image for AD FS.

NOTE: Supported image formats: .jpg, .bmp, .webp, .gif
:::note
Supported image formats: .jpg, .bmp, .webp, .gif
Required image file dimensions: 210 x 60 pixels
:::


If you do not upload an image, AD FS authentication will be shown as a button. This button would
have the same name as you entered in the Name box on the Create New Provider page.
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -35,8 +35,11 @@ Step 3 – The URL displayed in the Consumer URL box is a unique identifier for
It is used to set up relying party trust in AD FS. Click **Copy** to copy it. Then paste it in a
file, preferably a text file, to save it.

NOTE: On upgrade to Directory Manager 11, you must generate the consumer URL again for the Directory
:::note
On upgrade to Directory Manager 11, you must generate the consumer URL again for the Directory
Manager client configured with AD FS, and update it in AD FS.
:::


## Generate Entity ID/Audience URL

Expand Down
5 changes: 4 additions & 1 deletion docs/directorymanager/11.1/configureentraid/createid.md
Original file line number Diff line number Diff line change
Expand Up @@ -17,11 +17,14 @@ See the
[Create an Identity Store for Microsoft Entra ID](/docs/directorymanager/11.1/admincenter/identitystore/create.md#create-an-identity-store-for-microsoft-entra-id)
topic for creating an Microsoft Entra ID identity store.

NOTE: If you intend to use a service account user with Global Administrator directory role, then no
:::note
If you intend to use a service account user with Global Administrator directory role, then no
change is required in the default Directory Manager security roles settings of Microsoft Entra ID
identity store. And if you intend to use a service account user with any role, other than Global
administrator directory role (i.e. User Administrator + Exchange Administrator), then the Directory
Manager Administrator security role criteria group must be changed to User Account Administrator.
:::


## Directory Manager Security Role Setting

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -77,10 +77,13 @@ Step 10 – On the **All roles** page, add your registered application to a dire
Administrators can change passwords for users, Helpdesk administrators, and other User
Account Administrators only.

NOTE: By default, the Directory Manager Administrator security role in a Microsoft Entra
:::note
By default, the Directory Manager Administrator security role in a Microsoft Entra
IDidentity store binds to Global Administrator. If minimum role assignment for the service
account is used, the default Admin Security role criteria should also be changed to the
_User Account Administrators_ group.
:::


Step 11 – Click **Add**.

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -18,11 +18,14 @@ Directory Manager requires:
- A Microsoft Entra ID Directory Role for the service account for the Microsoft Entra ID identity
store.

NOTE: See the
:::note
See the
[All Role](https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/permissions-reference#all-role)
section for
[User Administrator](https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/permissions-reference#user-administrator)
and
[Exchange Administrator](https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/permissions-reference#exchange-administrator)
role permissions in
[Microsoft Entra built-in roles](https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/permissions-reference#microsoft-entra-built-in-roles).

:::
10 changes: 8 additions & 2 deletions docs/directorymanager/11.1/credentialprovider/installcp.md
Original file line number Diff line number Diff line change
Expand Up @@ -119,8 +119,11 @@ Having Orca successfully installed, follow these steps to deploy Credential Prov

![Group Policy Management console](/img/product_docs/directorymanager/11.1/portal/user/manage/gp_policy.webp)

NOTE: Group Policy Management console is available if the Group Policy Management feature has
:::note
Group Policy Management console is available if the Group Policy Management feature has
been installed.
:::


2. Right-click the domain or organizational unit for the computers that you want the Credential
Provider installed on. Select **Create a GPO in this domain, and link it here...**:
Expand All @@ -138,7 +141,10 @@ Having Orca successfully installed, follow these steps to deploy Credential Prov

![New Package option](/img/product_docs/directorymanager/11.1/portal/user/manage/software_installation.webp)

NOTE: This documentation describes steps for editing the default policy.
:::note
This documentation describes steps for editing the default policy.
:::


4. Browse to the shared folder. The folder must have the following files in it:

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -29,7 +29,6 @@ the _public_ role. Therefore, the Directory Manager SQL account belongs to two s
_db_creator_ and _public_.
:::


To add the Directory Manager SQL account to the db_creator role:

Step 1 – Launch SQL Server Management Console.
Expand Down
Loading
Loading