7.2

You have an existing policy that is applied to the development business group. The policy adds machine
records to ou=development,dc=corp,dc=domain,dc=com. You want all database machines to be added to
ou=databases,dc=corp,dc=domain,dc=com. In a blueprint that includes a database server, you override
the Active Directory organizational unit to add the database machine record to
ou=databases,dc=corp,dc=domain,dc=com.
This scenario makes the following assumptions:
n
Your Active Directory includes organizational units for development and databases.
n
You have a test blueprint that is included in a service and the service is entitled.
In addition to this simple example of how you can override the policy, you can use custom properties with
Active Directory policy to make other changes to Active Directory when you deploy blueprints. See
Working With Active Directory Policies.
Prerequisites
n
Verify that you have at last one Active Directory policy. See Create an Active Directory Policy. For
example, you create a development policy that adds records to
ou=development,dc=corp,dc=domain,dc=com.
n
Verify that you have a business group to which you applied an Active Directory policy. See Create a
Business Group. For example, your development business group uses the development policy.
Procedure
1 In your test blueprint, select the database machine in the canvas.
2 Click the Properties tab.
3 Click the Custom Properties tab.
4
Click the New icon ( ).
5 Add the custom property to change the default organizational unit.
a In the Name text box, enter ext.policy.activedirectory.orgunit.
b In the Value text box, enter ou=databases,dc=corp,dc=domain,dc=com.
c Deselect Overridable.
d Click OK.
6 Click Finish.
The test blueprint includes the custom property, but your users do not see the custom property in the
request form.
Configuring vRealize Automation
VMware, Inc. 320