Description

This HelloID Service Automation Delegated Form provides the deletion of disabled AD accounts functionality. The following options are available:

1. Search and select the target AD user account
2. Delete selected AD account after confirmation

Versioning

Version	Description	Date
1.0.2	Added version number and updated with code for SA agent and audit logging	2022/08/02
1.0.1	Added version number and updated all-in-one script	2021/11/03
1.0.0	Initial release	2020/09/01

Table of Contents

• Description
• All-in-one PowerShell setup script
• Getting started
• Post-setup configuration
• Manual resources
• Getting help

All-in-one PowerShell setup script

The PowerShell script "createform.ps1" contains a complete PowerShell script using the HelloID API to create the complete Form including user defined variables, tasks and data sources.

Please note that this script asumes none of the required resources do exists within HelloID. The script does not contain versioning or source control

Getting started

Please follow the documentation steps on HelloID Docs in order to setup and run the All-in one Powershell Script in your own environment.

Post-setup configuration

After the all-in-one PowerShell script has run and created all the required resources. The following items need to be configured according to your own environment

1. Update the following user defined variables

Variable name	Example value	Description
ADusersDisabledSearchOU	[{ "OU": "OU=Disabled Users,OU=HelloID Training,DC=domain,DC=local"}]	Array of Active Directory OUs for scoping AD user accounts in this form

Manual resources

This Delegated Form uses the following resources in order to run

Powershell data source 'AD-user-generate-table-disabled-remove-account'

This Powershell data source runs an Active Directory query to search for disabled AD user accounts. It uses an array of Active Directory OU's specified as HelloID user defined variable named "ADusersDisabledSearchOU" to specify the search scope.

Delegated form task 'AD Account - Remove inactive account'

This delegated form task will delete the selected AD user account from Active Directory.

Getting help

If you need help, feel free to ask questions on our forum

HelloID Docs

The official HelloID documentation can be found at: https://docs.helloid.com/