Help Center> Cloud Bastion Host> User Guide> Policy> Account Synchronization Rules> Querying and Editing a Synchronization Rule

Querying and Editing a Synchronization Rule

CBH allows you to edit account synchronization rules to meet your changed O&M requirements. For example, you can change when and how a synchronization rule is executed and which accounts or account groups a synchronization rule is used for.

A modified synchronization rule takes effect the instant its status changes to Enabled.

Prerequisites

You have the operation permissions for the Sync Rules module.

Querying and Editing Synchronization Rule Configurations

  1. Log in to the CBH system.
  2. Choose Policy > Sync Rules > Sync Rules.
  3. Query synchronization rules.

    • Quick search

      Enter a keyword in the search box to quickly query synchronization rules by rule name, resource name, and account,

    • Advanced search

      Enter keywords in the corresponding attribute search boxes to search for synchronization rules in exact mode.

      Figure 1 Advanced search

  4. Click the name of the synchronization rule that you want to edit or click Manage in the row of the rule in the Operation column. The details page of the rule is displayed.

    Figure 2 Viewing rule details

  5. View and edit basic information.

    In the Basic Info area, click Edit. In the displayed dialog box, edit the rule details.

    • You can edit Rule Name, Timing, and Action.
    • The Department cannot be modified.
    Figure 3 Viewing the basic information

  6. View and edit accounts related to the rule.

    • To relate an account to the rule or remove a related account, click Edit in the Execute Account area and complete modifications in the displayed dialog box.
    • To only remove a related account, click Remove in the row of the related account. The removed account then cannot be used for synchronizing accounts of the corresponding host.

  7. View and edit account groups related to the rule.

    • To relate an account group to the rule or remove a related account group, click Edit in the Execute Account Group area and complete modifications in the displayed dialog box.
    • To only remove a related account group, click Remove in the row of the related account group. Each account in the removed account group cannot be used for synchronizing accounts of the corresponding host.