Security Group Compliance Manager Connector_Events
Connector_Events define how Activate processes Security Group Compliance Manager compliance changes. When AD objects or group memberships are modified, Activate evaluates configured Connector_Events based on resource mappings and workflow configuration.
AD object changes (ADChangeHandler)
The ADChangeHandler processes changes to AD objects.
When the changed object is a group:
- If the group is mapped to a GroupResource in Activate, the Connector_Events parameter on that GroupResource is evaluated.
- If no Connector_Events parameter exists, or the group is not mapped to a GroupResource, events are sourced from the ChangeWorkflow under:
- Resources → ActiveDirectory
If no workflow nodes are configured at this level, an exception is thrown.
AD group membership changes (ADGroupMember)
The ADGroupMember handler processes changes to group membership.
Processing occurs sequentially in the following order:
- If the group is mapped to a GroupResource, its Connector_Events are processed.
- If the member row usage flags include DistributionLists, the Connector_Events on the DLResource are processed.
- If the member row is mapped to a Service, the Connector_Events on the Service are processed.
More than one set of Connector_Events can execute for a single membership change. While supported, this configuration is not generally recommended.
Commit behaviour
Connector_Events processing determines whether a change is committed.
- If any processing stage actions the change, it is committed.
- If no processing stage actions the change, it remains pending.
Configuration considerations
When designing AD compliance behaviour:
- Ensure GroupResource mappings are clearly defined.
- Confirm Connector_Events are configured at the correct level (GroupResource, DLResource, or Service).
- Validate that the ActiveDirectory ChangeWorkflow contains appropriate nodes where required.
Clear separation of responsibility between resource mappings and workflow configuration helps ensure predictable compliance processing.