Introduction

Each Resource Type has a management mode. The management mode defines what features are available to the Resource of this type.

Unmanaged Resource

Any resource that is present in the target system (i.e. Active Directory) but is not managed by the CoreOne Suite is called a unmanaged resource. On the target system configuration you can enable the show unmanaged resources feature. If you do so, you see all unmanaged resources that an identity is member of. You can even add or remove resources and the action will be tracked in the audit trail. But as this is an unmanaged resource, this has no effect on processes like Reconciliation / Cleanup and so on.

Linked Resource

This is the most common use case. Resources are created directly in the target system and the resource will be linked to the CoreOne Suite Meta Directory by either synchronizing them or adding them manually over the Admin UI. After the resource has been linked, the CoreOne Suite Meta Directory simply has a reference to the object and manages the membership of those resources for all identities that are present in the CoreOne Suite Meta Directory with the resource Reconciliation / Cleanup feature, if enabled.

Unlike with managed ressources, the CoreOne Suit does not manage the lifecycle of the resource itself. This means, if someone would rename or delete the resource in the target system, no actions will be taken by the CoreOne Suite.

Managed Resource

In addition to the features of a linked resource, the CoreOne Suite also manages the lifecycle of the resource. This means resource of this type can be created from the CoreOne Suite, changes to the resource in the target system will be detected and corrected. In order to configure a managed resource, you will need to configure a resource definition template and a resource provisioning configuration.

Comparison