Manage User Sync Rules
User Sync rules allow you to select an Active Directory group and add a rule about the products for which the users in this group will receive entitlements for, and what administrative privileges they will have.
You may have multiple rules for a given directory group (also known as organization group), and a user may belong to more than one group in the Active Directory. If you have multiple rules, you can manage the priority of the rules, and if desired, map custom attributes. Once you enable and run User Sync, you can always modify or delete an existing rule. If you run into any issues, you can troubleshoot.
Create Your First Rule or Add a New Rule
Create User Sync rules to tell the system how to provision the users sent from the Active Directory Connector to the LogMeIn Admin Center (e.g., assigning products, roles, etc.).
- Sign in to the Admin Center at https://admin.logmeininc.com.
- Select User Sync in the left navigation.
- Click Create your first rule or Add rule.
- Under Select a group from your company directory, use the drop-down menu to select your desired directory group for which this rule will apply. If desired, you can add notes about this directory group in the Description field. Note: Directory groups are user groups in your Active Directory that are populated by either running the ADC service or groups that were pushed via SCIM provisioning.
- Under Products, check the box(es) to enable the product(s) to assign to these users within your selected directory group.
- If this directory group will not have admin or manager privileges, move on to Step #7. Otherwise, check the box to enable the "Administrator for this Account" option, then choose one of the following options:
- Select Full access to all account privileges to grant full admin permissions.
- Select Manager for specified group(s) with limited privileges to customize admin permissions as follows:
- Privileges – Click the list of privileges hyperlink, check the box(es) to apply your desired permissions, then click Apply.
- Groups – Click None Selected, select 1 or more user groups to which your entered user(s) will be assigned, then click Apply.
- Under User Details, use the drop-down menu to select one of the following options:
- A customized Welcome email template. Once selected, you can choose from Preview, Edit, or Delete.
- Click Create New Template to make a new one – if selected, you will continue to remain on the same page and keep your changes thus far.
- Leave as-is to select the Default Welcome Email template, which you can click Preview to display its contents.
- Next, select a default language for your directory group, which will display the following in your selected language:
Note: An active user can change their own default language settings at any time.
- Welcome Email
- All product Web App pages
- If applicable, the application that you download and/or install to host meetings
- Next, select a user group that you have created, or leave as-is to select No Group (or learn how to create a user group.
- Lastly, use the drop-down menu to select a default settings template you have already created, or leave as-is to select Default. A settings template is a specific profile that you can create that allows you to apply a set of default feature settings (per product within your account) to a directory group (e.g., disabling the ability to record GoToMeeting sessions for all organizers within a directory group). Learn how to create a user settings template.
- Click Save if you are finished, or click Save & add another to save and move on to create settings for your next directory group.
- If you have more than one rule, you will need to prioritize them.
Manage Rule Priority
If you have multiple rules, you can click and drag on each rule in the "Re-order" column to adjust the prioritization of the order in which the rules apply. The rule with the highest ranking (i.e., lowest priority rule number) takes precedence over subsequent rules, meaning Rule #1 takes priority over Rule #2.
If you have users that exist in 1 or more directory groups, all assignments contained within the rule with the highest priority ranking will be used in favor of the same assignments contained in lower priority rule(s). Here are some examples:
- A user is in 2 directory groups with 2 rules assigned: Rule #1 is assigned User Group A and Rule #2 is assigned User Group B. Since only 1 user group can be assigned to a user, they will be assigned to User Group A from Rule #1 as it is ranked highest in priority.
- A user is in 2 directory groups with 2 rules assigned: Rule #1 is assigned Device Group A and Rule #2 is assigned Device Group B. Since you can have multiple device groups assigned to a user, the user will be assigned both Device Group A and Device Group B.
Note: Device group assignment is only applicable to accounts provisioned with GoToAssist Remote Support.
- A user is in 3 directory groups with 3 rules assigned: Rule #1 is assigned GoToMeeting Pro, Rule #2 is assigned GoToMeeting Plus, and Rule #3 is assigned GoToAssist Remote Support. The user will be assigned GoToMeeting Pro (due to higher ranked priority of the rule) and GoToAssist Remote Support.
Note: For rules that contain more than 1 product tier (e.g., GoToMeeting Pro and GoToMeeting Plus), the rule with the highest priority ranking will be assigned, even if it is a lower-tiered product.
Map custom attributes in User Sync
Once you have configured user attributes on the ADC v2 (and if desired, created your own custom fields), you can map your attributes in User Sync.
Enable and run User Sync
Once you have set up your rules and their prioritization, then you are ready to run User Sync.
- Toggle the switch on to enable the User Sync is on option.
- If desired, you can click Activity History in the left menu to monitor admin activities (learn more).
Congratulations! You have completed all of the steps for setting up the Active Directory Connector v2. You can also learn more about updating the ADC v2 to the latest version when new versions become available.
Modify an existing rule
- Click Edit on the rule you want to modify, then make changes to any of the value(s).
- Click Save when finished, or to keep creating more rules, click Save & add another.
Delete an existing rule
Users within directory groups are never deleted. If all applicable rules for a user are deleted, the user becomes in a state of "suspended" which retains their account and product-related data (e.g., upcoming meetings, stored recordings, etc.). Only the settings within the rule are removed from use while the users will continue remain on your account.
- Click the Delete icon to remove a rule, then click Yes, delete to confirm.