No matter what regular expression I try, it does not work. I have opened a support case and have not gotten far; the same regular expressions do work in the VMware support lab on their end. They are saying since there is no error, it becomes and SDK support issue. However, we do not have SDK support.
I think it has to do with the how the Notify workflow ties into Active Directory in vRealize Orchestrator, in particular the on_behalf_of input field. Please see URLs below. Yes, we do have the plugin installed. It sounds like it is possible for it to call to a sub OU in the Active Directory inventory. It appears as though it is currently calling from the top level of Active Directory. Our non-SU and SU accounts are in different OUs. My thinking is if we specify only the OU with the SU accounts, then the field in VRA will not be able to select non-SU accounts.
I need help to figure our where to go in VRO to make the changes; we are at version 7.6.0. This is the AD path: OU=AdminAccounts,OU=Admin,DC=GD-MS,DC=US
I have attached screenshots.
https://code.vmware.com/forums/3055/vrealize-orchestrator#537777 and https://communities.vmware.com/people/igaydajiev/blog/2016/07/18/active-directory-plugin-300-new-and-noteworthy