Container attribute modification

Modifying the Container attribute means moving a user from one container to another.

You can move a user between:

  • Containers that are stored at the specified base point
  • All containers, if no base point is specified.
    Note: If no base point is specified when creating an Active Directory service, the Active Directory Adapter creates users in the Users container of the Active Directory.

When you modify the Container attribute, the distinguished name of a user changes because the user moves to a different position in the Active Directory hierarchy. The following example illustrates changes in the distinguished name of a user, when you modify the Container attribute.

For example, a user account with the name Thomas Daniel exists on the Active Directory. The Active Directory has the following structure.
Figure 1. Example of an Active Directory structure
Example of an Active Directory structure
The distinguished name of Thomas Daniel is:
cn=Thomas Daniel,cn=Users,dc=ibm,dc=com
Modify the Container attribute on IBM® Security Identity Manager from cn=Users to ou=Marketing. After this change, the distinguished name of Thomas Daniel changes to the following value:
cn=Thomas Daniel,ou=Marketing,ou=Departments,dc=ibm,dc=com