To configure this feature:

1. Ensure Configuring Align is complete.
2. Navigate to Admin > Users & Groups > Permission Sets.
3. Select the appropriate Permission Set.

4. Select Objects.

5. Grant the following permissions:

   Object	Object Permission	Object Types	Fields	Field Permission
   crm_security_profile__v	R	All	All	Read

6. Navigate to Align > Align Admin > Align Settings (Production).

7. Select Enabled for the Manage CRM Users picklist.

8. Select Save.

User Field Mapping Between CRM and Align

Once User Management is configured, admins can customize the mapping between aln_roster_member__v records and user__sys records:

1. Navigate to the Align Integrations page in the Integrations tab.
2. Select View Field Map in the Gear menu for the appropriate Vault CRM instance.
3. Select the Align Objects tab.
4. Navigate to the Roster Member section.

The following table represents the default mappings between aln_roster_member__v records and user__sys records:

aln_roster_member__v	user__sys
address_line_1__v	street__v
alias__v	alias__sys
city_cda__v	city__v
crm_country_code__v	country__v
crm_language__v	language__sys
crm_locale__v	locale__sys
crm_security_profile__v	security_profile__sys
crm_time_zone__v	timezone__sys
crm_user_status__v	status__v
delegated_approver__v	delegatedapproverid__v
email__v	email__sys
first_name_cda__v	first_name__sys
last_name_cda__v	last_name__sys
manager__v	manager__v
master_align_id__v	master_align_id__v
nickname__v	communitynickname__v
state_aln	state_province__v
username__v	username__sys

The Roster Member Fields section in the CRM Objects tab continues to manage the mapping of fields for CRM-mastered records.

After enabling User Management, admins can use the CRM User Management section on all aln_roster_member__v record detail pages to indicate how the record is mastered, as well as view information from the corresponding user__sys record.

Designating Roster Members as Align-Mastered

When a roster member is designated as Align-mastered, all changes made to that record on mapped fields must originate from the aln_roster_member__v record.

To master roster members in Align:

1. Navigate to the appropriate aln_roster_member__v record.
2. Navigate to the CRM User Management section.
3. Update the Mastered by Align picklist to Yes.

4. Repeat this process for all appropriate records. Users can also use the Vault Loader to repeat this process in bulk. When using the Vault Loader to master roster members in Align, ensure all aln_roster_member__v records have the following required fields populated:

   • alias__v
   • crm_country_code__v
   • crm_language__v
   • crm_locale__v
   • crm_security_profile__v
   • crm_user_status__v
   • crm_time_zone__v
   • email__v
   • first_name_cda__v

Roster members mastered by Align must have a populated crm_time_zone__v field. This field enables admins to control the timezone of the corresponding user__sys record.

Roster members mastered by Align are skipped during imports. New roster members mastered by Align are pushed as new user__sys records. Existing roster members with a status__v field of active__v update the corresponding user__sys record. Changes made to Align-mastered user__sys records are overwritten during the next push if the change was made on a mapped field.

The crm_imported_security_profile__v field on the aln_roster_member__v object should not be used when the roster member is managed by Align. Removing this field from page layouts is recommended.

Align operational users can control a user__sys record’s status from Align if the corresponding record is Align-mastered using the crm_user_status__v field. This enables users to create inactive user__sys records in Align before their start date and activate the corresponding user__sys record at a later date. This also enables administrators to mark offboarded roster members as inactive.

If a manager or delegated approver is assigned to an Align-mastered roster member, the aln_roster_member__v record representing the manager or approver is also pushed, even if that record is not designated as Align-mastered.

Assigning User Profiles

Vault CRM Security Profiles automatically import when User Management is configured. Imported Security Profiles enhance the roster member creation process by enabling users to assign Security Profiles to Align-mastered roster members.

Security Profiles import as crm_security_profile__v records in Align with the following properties:

• name__v – The name of the corresponding Security Profile
• status__v – active__v
• crm_record_id__v – The ID field of the corresponding Security Profile

crm_security_profile__v records are deleted during an import if they do not have a corresponding Security Profile. This means if a Security Profile is deleted, the corresponding crm_security_profile__v record is deleted during the next import. An error occurs if a crm_security_profile__v record marked for deletion is assigned to a roster member or functional profile record.

Security Profiles are typically assigned via Using Functional Profiles, but can be manually overridden:

1. Navigate to the appropriate aln_roster_member__v record.
2. Navigate to the CRM User Management section.
3. Use the crm_security_profile__v lookup field to select the appropriate crm_security_profile__v record.