OrgUnitPath Translation Map question and feature request
Question first:
Is there a limit to how many mappings can I have in “OrgUnitPath Translation Map” within Google Devices Sync? I currently have roughly 250 mappings, I need to add about 200 more. If I add them will it slow down or limit out API write back to Google?
Feature request:
I have 50 schools, so the same mapping I have to write 50 rules. Any plans on adding either Regex logic into filters, where I could have a master lookup table with my schools (names or numbers) and then have the mapping filters reference the master lookup.
Example:
SchoolName
School#
Bates Elementary
100
Mountain High
200
The filter would be:
“SchoolName” (as a dynamic variable) and OU assignment would be /schools/School#/students
Page 1 / 1
@akorkishko Thank you for submitting your question to our community! I have split the feature request into a separate idea thread; check out that link below.
Thank you for being patient while I replied; I had to check with our support team about this. It looks like you have the asynchronous sync on, so you should not experience any slowness. Could you explain a bit more about your workflow so I can understand why you have so many?
Thank you for being patient while I replied; I had to check with our support team about this. It looks like you have the asynchronous sync on, so you should not experience any slowness. Could you explain a bit more about your workflow so I can understand why you have so many?
I have 50 schools in my district. We have 4 different OUs in google where we have to have different chromebooks reside due to how Google deploys device policies to chromebooks. Our example are different kiosk chromebooks in the front office of each school which are locked to access specific websites only. Sites are different by school, so I have to put different policies on different OUs.
We currently have 250 OU mappings for the same reason. Staff chrombooks, student chromebooks, etc have to be mapped to similar organization, the only difference is location field.
I would LOVE to see the User’s Assigned Location field you guys put into v2 Permissions distributed through out the Rules engine in IIQ. Larger district would greatly benefit from it by making 1 rule instead of the amount of rules needed for each location.
Did that answer your question Kathryn?
@akorkishko That does make sense, thank you for elaborating.
I will say you do have the option to create 1 rule to assign to multiple locations:
Are you utilizing this rule? However, you can't do user-assigned location, which would be helpful, but this could get you started.
I do use that as well, except for every rule I need to re-write the Location mappings.
I am doing the same as you, except I am assigning to a team, which gets auto-populated via Google SSO team mappings.
Google Group (GroupA) > IIQ Team (TeamA, etc)
IIQ Team > v2 User Permission
Rule assign to a team (by location)
LocationA > TeamA
LocationB > TeamB
So I was able to get hands off user management, but it doesn’t work for Google Device app Org mappings.
@akorkishko Gotcha. Thanks for clarifying your workflow for me!