Hi,
{XI3.1 SP2 FP2.3 + SAP Int to BW}
Right now I have my AD update/sync scheduled to run every 4 hours so 8am, noon, 4pm, 8pm…etc.
I’ve recently handed over some of the BO security related tasks to our SAP security team, so they can process users from end to end, meaning they can give them roles for BW and now add SAP alias in CMC and put users into certain native BO groups. They can also put users into AD groups. I have the CMC restricted way down so they cannot see Authentication area. They are now requesting me to run the AD update more frequently, like every hour so they don’t have to wait or go home if it’s after 4pm and come back in the next day and finish a user setup. We pull the users into BO via AD, then visit them manually to add the SAP alias and put them in any other BO groups for Webi, Deski, Designer, etc. Yes I know we can import from SAP, but environment is unique so we do it that way.
This brings me to my question, are there any implications to BO of doing this process that frequently? It doesn’t appear to take up much system resources, seems to run for a few minutes as we have only a couple AD groups mapped in but about 2000 users.
Also, if this process is running…say on the hour…and I forget and I then stop the SIA or reboot the server in the middle of an update…can it corrupt anything? How sensitive is that AD sync?
ccermak 
(BOB member since 2007-11-13)