PIM Manager settings · Settings > Features & edition
On-premises Active Directory (hybrid worker)
| Key | FeatureGates.hybrid.ad |
|---|---|
| Where | Settings > Features & edition > Feature customization |
| Type | On / off |
| Default | Off |
| Feature | PIM for on-premises Active Directory · Pro Business, Pro Enterprise, Pro MSP |
| Confirmation | PIM Manager asks you to confirm before it is switched on. |
What it does
Lets PIM Manager work with your on-premises Active Directory through the hybrid worker, a small service you install on a domain-joined server. It creates admin accounts in AD, mirrors the PIM groups you mark for AD to AD groups, and puts people who activate a PIM group into its AD group for the activation time.
When enabled
The hybrid worker's jobs run on their schedule, and the Jobs page and Settings > Hybrid Active Directory show whether the worker has checked in.
When disabled
The hybrid worker's jobs do not run and are shown as switched off. Nothing is changed in Active Directory, and nothing warns about a missing hybrid worker.
Risk and how to reverse it
Low. Switched on without an installed hybrid worker, the hybrid jobs report that the worker has not checked in. Switched off on an install that uses it, AD admin accounts, AD groups and activation-time AD membership are no longer kept in step until you switch it on again.
Requires
A Pro licence that covers this tenant. SuperAdmin to change it. The hybrid worker installed on a domain-joined server, with its own service accounts.
Recommended
Off unless you use on-premises Active Directory with PIM Manager. Switch it on after the hybrid worker is installed.
Related settings
- AD OU (Day2Day Admins) NamingConventions.PathAdmins
- AD OU (High Priv Admins) NamingConventions.PathAdminsL0T0
- AD group marker HybridAdGroupMarker
- Pattern override HybridAdGroupPattern
- Cloud admin suffix HybridAdCloudSuffix
- AD admin suffix HybridAdAccountSuffix
- OU for new AD groups HybridAdGroupsOu
- Per-server group format HybridAdServerGroupFormat
- Shared server-admins group HybridAdServerAdminsGroup
- Never remove HybridAdProtectedMembers
- Groups per batch HybridAdSyncBatchSize
- Batches at once HybridAdSyncParallel
- Read activation end times as UTC HybridAdEndTimeAsUtc
- Server discovery: only these OUs HybridAdServerSearchOus
- Server discovery: OUs to leave out HybridAdServerExcludeOus
- Server discovery: last changed within (days) HybridAdServerActiveDays
- Server discovery: only names like HybridAdServerNameInclude
- Server discovery: never names like HybridAdServerNameExclude
- New servers in these OUs are offered for approval as one list HybridAdServerAutoGroupOus
- Server groups created per run HybridAdServerAutoGroupMaxPerRun
- Clean-up: also look for old PIM groups in these OUs HybridAdCleanupOus
Documented for PIM Manager 3.0.70. Written by the PIM Manager team; Invardia publishes it. · All settings · Security review pack