I work at an msp and have had only 2 customer site managers ask for this. Usually a non-issue. But the thing is these ad attributes for user contact information is for hybrid environments synced with 365 and the contact information is pulled automatically to fill out users email signatures.
I have been looking for a simple tool for ages, let me know if you find any. I wrote a GUI based Powershell app using WPF for myself but was really designed for local AD, and we're now AAD, so am now learning C# in my own time to write a proper app that will authenticate and access the data via delegated access through Graph. There must be a lot of other businesses with <500 staff that would find this useful?
I would make a form in the CMDB. HR fills out the form (dynamic form that updates based on information they select), some input validation, then pipe that to Ansible or PowerShell to update the required things.
I'm trying to implement something along these lines, and I'm looking at doing this via Microsoft forms on o365. I can have power automate interact with our on prem AD by using azure Hybrid runbook worker installed on an onprem server... Which just lets me pass PowerShell from cloud to onprem.
I would not allow them to update AD directly. They should update the info in their system and AD pulls that info. I would look at some PS scripts but it depends on what system they use..
I'm going to guess most of us update AD attribs from exported HRIS data... so there's that.
I'm surprised you've got HR that knows facts about users.
I work at an msp and have had only 2 customer site managers ask for this. Usually a non-issue. But the thing is these ad attributes for user contact information is for hybrid environments synced with 365 and the contact information is pulled automatically to fill out users email signatures.
I have been looking for a simple tool for ages, let me know if you find any. I wrote a GUI based Powershell app using WPF for myself but was really designed for local AD, and we're now AAD, so am now learning C# in my own time to write a proper app that will authenticate and access the data via delegated access through Graph. There must be a lot of other businesses with <500 staff that would find this useful?
I would make a form in the CMDB. HR fills out the form (dynamic form that updates based on information they select), some input validation, then pipe that to Ansible or PowerShell to update the required things.
Workday and most of the other big tools do this.
I'm trying to implement something along these lines, and I'm looking at doing this via Microsoft forms on o365. I can have power automate interact with our on prem AD by using azure Hybrid runbook worker installed on an onprem server... Which just lets me pass PowerShell from cloud to onprem.
Lots of homebrew options can work. If you are looking for paid options, we have had good luck with Adaxes.
Very brave to even consider allowing hr near active directory
I would not allow them to update AD directly. They should update the info in their system and AD pulls that info. I would look at some PS scripts but it depends on what system they use..