question

Grant-2921 avatar image
0 Votes"
Grant-2921 asked michev answered

Update manager attribute in AzureAD with powershell

We use AzureAD connect to synchronize users between our on-prem AD and AzureAD. For a variety of architecture reasons, we cannot rely upon the sync process to update the user's manager attribute in AzureAD.

Is there a way to update the manager field on an AzureAD object by using powershell? When we attempt to execute either via powershell or via the AzureAD GUI, an error is thrown. We have tried disabling the manager attribute from the scope of the on-premAD to AzureAD sync.

azure-active-directoryazure-ad-connect
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

michev avatar image
0 Votes"
michev answered

No, if the user is synced from on-premises AD, the manager needs to be updated therein. Removing the attribute from the sync scope wont change this.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

AndreasBaumgarten avatar image
0 Votes"
AndreasBaumgarten answered

Hi @Grant-2921 ,
which error message do you get?

As far as I know it's not possible to modify a synced user account in Azure AD. You have to modify the user attributes at the source > local AD.

Please take a look here as well: https://docs.microsoft.com/en-us/answers/questions/170513/ways-to-modify-sync39d-azure-ad-user-data.html


(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)

Regards
Andreas Baumgarten

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.