Synced User Behaviors
Once directory sync is set up, groups and users in your organisation's Autodesk team will be updated in your Autodesk Account.
Known Issues
- The nested groups are not supported. They will be sent as the users in the group.
Users added to your team via directory sync will be read-only, meaning that the user properties such as name or email cannot be modified by the admin and they cannot be manually removed from the team or synced group type.
Please note that a link icon will appear next to a user's avatar, and Synced icon will be displayed beside the user's name on the user details page only if the user belongs to one or more Synced Groups. However, if it is a synced user but is not part of any Synced Groups, the link icon and the Synced icon will not be present.
In order to have the most efficient user provisioning flow, users should be synced to Autodesk Account via a user directory group and be auto-assigned entitlements from that group. Synced users, while being read-only though, can be added to local groups and can be assigned individual software entitlements.
Once a user is synced to Autodesk Account from your user directory, an account admin is permitted to select the synced user from User Management "By User", view the users details and either assign a software seat, or edit group membership and add them to an existing local group.
This can be useful in cases where a user is permitted some basic software assignments through their organisation's group membership, but may require specialist software assignments only granted to a handful of users.
Updating user directory
As your user directory admin make changes to user membership, update status and user details these will be reflected in Autodesk Account. It is important therefore, to understand what these changes mean for user access, the table below outlines what admins should expect to see in Autodesk Account after a change.
Note that changes to the user directory will only be reflected in the Autodesk team after the automated sync is complete. The timing will vary depending on the identity provider, and in some cases, a complete manual sync may be required to refresh all changes.
| Action in Organization User Directory | Response in Autodesk Management Account |
|---|---|
| Directory Sync Connection Enabled | Relevant users and groups are created. The synced group is read-only, and while users cannot edit their profiles, they can be added to non-synced groups and have their roles changed. |
| Add User to a Directory Sync Group | The synced user is added to the synced group. |
| Disable User in User Directory | The synced user is removed from synced groups and the team. All assigned seats are lost. |
| Delete User in User Directory | Not supported. |
| Remove User from All Synced Groups | The synced user is removed from synced groups. |
| Add User Back into Synced Group After Removal | The synced user is added back to the synced group. |
| Remove User from One of Multiple Synced Groups | The synced user is removed from the specified synced groups. |
| Group is Removed from Directory Sync Connection | The synced group is removed from the team. The behavior of synced users may vary depending on different directory settings. |
| Disable Directory Sync | Synced users and synced groups remain in a read-only state in the team. |
When a user is re-enabled, the user is added back to the team but not to their hubs and projects. This is done manually.
- Adding a user back to the Active Directory is done manually (unlike for teams).
- Removing a user from the Active Directory by the Active Directory Administrator removes the user from the hubs and projects they are on.