We need the ability to prevent API-based group sync actions from occurring unless they are specifically and manually confirmed.
For each group configure the following options:
Require Manual Confirmation for Group Add
Require Manual Confirmation for Group Remove
Create a new "manual job queue" table which stores:
The Identity ID
The Group ID
The Action (Add / Remove)
If a person is ADDED to a group (per the API Group Sync process), and that group requires manual confirmation, add that action to the manual job queue, but don't actually add the person to the group.
If a person is REMOVED from a group (per the API Group Sync process), and that group requires manual confirmation, add that action to the manual job queue, but don't actually remove the person from the group.
Build a web interface (Data Grid) which shows all of the jobs in the manual job queue, and all them to be processed. (Checked items are processed, and unchecked items are not)
We need the ability to prevent API-based group sync actions from occurring unless they are specifically and manually confirmed.
For each group configure the following options:
Create a new "manual job queue" table which stores:
If a person is ADDED to a group (per the API Group Sync process), and that group requires manual confirmation, add that action to the manual job queue, but don't actually add the person to the group. If a person is REMOVED from a group (per the API Group Sync process), and that group requires manual confirmation, add that action to the manual job queue, but don't actually remove the person from the group.
Build a web interface (Data Grid) which shows all of the jobs in the manual job queue, and all them to be processed. (Checked items are processed, and unchecked items are not)