Modification Rules

Modification Rules allow administrators to automatically assign values to fields based on conditions evaluated when a user submits a profile update. This is useful for enforcing business logic without requiring manual admin intervention — for example, automatically setting a field's value based on what a user entered in another field.

Modification Rules are accessed via the Modification Rules button at the top right of the layout editor.

How a rule works

Each rule consists of two parts:

Conditions

Conditions define when the rule should trigger. A condition evaluates a specific field against a value using one of the following operators:

Multiple conditions can be added to a single rule. If no conditions are specified, the assigned values will always be applied to Active Directory when the user saves their profile.

Assign Values

Assign Values define the field/value pair to apply when the conditions are met. Select the field to update from the Update dropdown (which lists all fields currently in the layout, grouped by category) and enter the value to assign. LDAP attribute macros such as %ldapName% can be used as dynamic values.

Multiple field assignments can be added to a single rule using the Add button.

Configuring a Modification Rule

1. In the layout editor, click Modification Rules at the top right.
2. Click Create New Rule (or Add Rule if rules already exist).
3. Under Conditions, click Add Conditions and select a field, operator, and value for each condition. Use the + button to add more conditions, and the × button to remove one.
4. Under Assign Values, select the field to update from the Update dropdown, enter the target value, and click Add. Repeat for additional field assignments.
5. Click Save.

Your modification rules are now in effect. The next time a user submits a profile update that matches any configured rule, the assigned values will be applied automatically in Active Directory.