Select one or several domain users in the Users section by holding down the CTRL or SHIFT keys.
Select the Synchronize with LDAP item in the drop-down menu of the 
User button on the toolbar or in the domain user's context menu.
To ensure domain user names remain up-to-date, in Foresight Analytics Platform and in PostgreSQL DBMS synchronize domain user attributes and LDAP directory attributes. Attribute synchronization parameters should be set in the settings.xml file.
The attributes that can be synchronized: Name, ObjectSid, SamAccountType, SamAccountName, GroupType, UserPrincipalName, DistinguishedName, Email (in Linux OS). Attributes from the LDAP directory are obtained based on user SID. When attributes are being synchronized, user SID does not change.
Synchronization of domain user attributes is available for the users with the Changing User Permissions, Distributing Roles, Changing Policy, the Creating and Deleting Users, and the Applying User Permissions at DBMS Level privileges.
To synchronize domain user attributes with LDAP directory attributes:
Select one or several domain users in the Users section by holding down the CTRL or SHIFT keys.
Select the Synchronize with LDAP item in the drop-down menu of the User button on the toolbar or in the domain user's context menu.
After executing the operations, domain user attributes are sequentially synchronized with LDAP directory attributes, and a message with the number of successfully synchronized domain users is displayed.
When attributes are being synchronized, domain users are renamed on DBMS level if the following conditions are satisfied:
In the LDAP directory the value of the attribute mapped with the user name (value of the Name attribute) has changed in the settings.xml file.
Domain user is not connected from the server. This condition is satisfied if the Create on DB Server checkbox was selected in the Create Accounts dialog box.
Built-in authorization file.
Renaming is executed based on the SamAccountName or UserPrincipalName attribute, depending on the value of the USEUPN attribute in the Metabases.xml file. To rename domain users on DBMS level, database user credentials are requested in the Database Authorization dialog box.
If a synchronization script is executed for support of domain groups, when it is required to add domain users in the security manager, make sure that users are created on DBMS server and connected from the server of Foresight Analytics Platform. The domain users connected from the server are not renamed on DBMS level during synchronization with LDAP directory attributes in the security manager. In this case separate synchronization is executed:
When the Synchronize with LDAP item command is executed in the security manager, domain user attributes added in Foresight Analytics Platform are synchronized with LDAP directory attributes.
When the script is being executed, names of groups and users included in groups are synchronized on the DBMS server with names in the LDAP directory based on the SamAccountName attribute. Membership of users in groups is checked during synchronization.
NOTE. Attributes in the settings.xml file and the script must match. By default, synchronization by the SamAccountName is set up in the script.
If value of the attribute mapped with the user name has changed in the LDAP directory, the user role will be recreated on the DBMS server during synchronization script execution. To apply changes, update domain user permissions in the security manager.
See also:
Creating User Accounts and Working with Them | Connecting Domain User