System administration

When creating the company structure on an AD server, the following information has to be added: the department hierarchy; the heads of the departments; the users (employees) added to their respective departments. All this data is copied automatically when importing users to Bitrix Framework. As a quick and dirty way of creating data on the AD server, you can add all the AD users to a special shadow department.

The following two user properties are used to define the company structure:

• department: a symbolic name of a department to which the user belongs;
• manager: a DN (Distinguished Name) of the user’s supervisor.

The company hierarchy is created using the following rules.

• If a supervisor (manager) belongs to some other department, this implicitly defines the department disposition: the manager's department is higher than the user’s department. The user is then considered as a supervisor of his or her department.
• If the manager belongs to the same department, then the user is not the department’s supervisor. Notice that all the department’s subordinates should have the same manager.
• If no department is specified, but the manager is not empty, the user is implicitly added to the same department as the manager. This rule applies to the manager and his or her managers recursively.
• If the department is specified, but the manager is empty, then this department belongs to the root of the hierarchy, and the user is the department’s manager.
• If both the department and the manager are empty, the user is added to the default department specified in the module settings.