Identity Policies › How Users and Identity Policies Are Synchronized › Synchronize Users Manually

Synchronize Users Manually

You may want to manually synchronize a user with an identity policy set to ensure that a user account has the right privileges, or complies with a compliance policy.

You can manually synchronize a user by using the Synchronize User task in the Identity Manager User Console.

Note: For the Synchronize User task to work properly, the User Synchronization option must be set to Off, and the Account Synchronization option must be set to On Task Completion or On Every Event. For better performance, choose the On Task Completion option. These options are set in the Profile tab for the Synchronize User task.

The Synchronize User task includes the following tabs:

• Currently Matched Policies—Displays a list of identity policies that Identity Manager will apply to the user when the Synchronize User task is submitted.

  Note: The Currently Matched Policies tab displays only the identity policies that apply to the user at the time you access the Synchronize User task. When the user is synchronized with those policies, changes may occur that trigger other identity policies. To prevent Identity Manager from applying the new policies until you have reviewed them, set the recursion level for identity policy sets to 1 in the Identity Manager Management Console. After submitting the Synchronize User task, access it again to review the policies.

• Policies Already Applied—Displays a list of identity policies that have already been applied to the user.
• Synchronization Summary—Displays all of the identity policies that apply to the user and the change actions for those policies.

To synchronize a user account

1. Log into Identity Manager as a user who can use the Synchronize User task. (By default, users with the System Manager role can use this task.)
2. Select Policies, Synchronize User.

   The Synchronize User task opens.

3. Select the Synchronization Summary tab.
4. Review the policies and associated actions that Identity Manager will apply to the user, then click Submit.