BusinessObjects Enterprise Administrator's Guide

Troubleshooting AD accounts

Creating a new AD user account

• If you create a new AD user account, and the account belongs to a group account that is mapped to BusinessObjects Enterprise, ensure that you update the user list by clicking Update in the Windows AD tab found in the Authentication management area. Note that you must click Update to ensure that new users are imported properly. For information on viewing AD users and groups, see Viewing mapped AD users and groups.
• User accounts are automatically created for AD users who are added to an AD group when these users successfully log on to BusinessObjects Enterprise.

Adding an AD group account to a mapped AD group

• When you add an AD group account to an AD group that was previously mapped to BusinessObjects Enterprise, and you would like the users of this nested group to get imported into BusinessObjects Enterprise, you need to click Update in the Windows AD tab (found in the Authentication management area).

  Note:    The nested AD group will not get mapped to BusinessObjects Enterprise by this operation.

• When you have added a new account in AD, and the AD group to which the account belongs is already mapped to BusinessObjects Enterprise, there are three ways you can get the new AD account into BusinessObjects Enterprise. Choose the method that works best for your situation:
• When the new AD user logs on to BusinessObjects Enterprise and selects AD authentication, the system will add the user to BusinessObjects Enterprise. This is the simplest method and it doesn't require any extra steps, but the user won't be added until he or she logs on to BusinessObjects Enterprise.
• You can add the new user to BusinessObjects Enterprise and select Windows AD authentication. The user is added and is automatically assigned a Windows AD alias. See Creating a user and a third-party alias.
• You can go to the Windows AD tab in the Authentication management area and select the option to add all new aliases and create all new users, and then click Update. In this case all AD users will be added to BusinessObjects Enterprise. For details, see Mapping AD accounts. However, if the AD group contains many users who don't require access to BusinessObjects Enterprise, you may want to add the user individually instead.