Hi,
Not sure how this happened, but it did. I have about 300 groups that are stuck in a pending export with a delete-add operation on them. I tested this "operation" with a low impact group to see if it was actually going to delete it and re-add it. It did just that. That's going to be a problem because, if I'm not mistaken, that's going to wipe out the ACLs (permissions) for the group.
I need to figure out how to get this to not delete the groups. Everything is identical between what's in Active Directory and what's in the connector space. So, there are no changes in any of the group names, DNs, members, etc.
I read something about the DeleteAddAsReplace property that would change a delete-add operation to a replace. But, I don't think that's something I can set when configuring the MA. But, I may not be looking in the right place.
Right now, I have the permissions on those group objects revoked. So, the export can mess with them. But, I can't leave it like that forever.
Any ideas would be appreciated.
Greg
