Help Center/ Cloud Bastion Host/ User Guide/ Policy/ Account Synchronization Rules/ Querying and Editing a Synchronization Rule
Updated on 2024-09-30 GMT+08:00
View PDF

Querying and Editing a Synchronization Rule

You can edit a synchronization rule to meet your changed requirements. For example, you can edit when and how a synchronization rule is executed and which accounts, account groups, and resources a synchronization rule is used for.

A modified rule takes effect the instant its status changes to Enabled.

Prerequisites

You have the operation permissions for the Sync Rules module.

Querying and Editing Rule Configurations

  1. Log in to your bastion host.
  2. Choose Policy > Sync Rules > Sync Rules.
  3. Query account synchronization rules.

    • Quick search

      Enter a keyword in the search box to quickly query rules by rule name, resource name, and account,

    • Advanced search

      Enter keywords in the corresponding attribute search boxes to search for rules in exact mode.

  4. Click the name of the rule that you want to edit or click Manage in the row of the rule in the Operation column. The details page of the rule is displayed.
  5. View and edit basic information.

    In the Basic Info area, click Edit. In the displayed dialog box, edit the rule details.

    • You can edit Rule Name, Timing, and Action.
    • The Department cannot be modified.

  6. View and edit accounts related to the rule.

    • To relate an account to the rule or remove a related account, click Edit in the Execute Account area and complete modifications in the displayed dialog box.
    • To only remove a related account, click Remove in the row of the related account. The removed account then cannot be used for synchronizing accounts of the corresponding host.

  7. View and edit account groups related to the rule.

    • To relate an account group to the rule or remove a related account group, click Edit in the Account Group area and complete modifications in the displayed dialog box.
    • To only remove a related account group, click Remove in the row of the related account group. Each account in the removed account group cannot be used for synchronizing accounts of the corresponding host.