Skip to main content
日本語 简体中文 繁體中文

[Access Control] Procedure for Changing Username (Microsoft 365)

Question

How can I change the username for a user on Access Control?

Answer

The username on Access Control cannot be changed; you need to delete the user once and recreate them.
The procedure differs depending on the deployment configuration and account synchronization method, so please refer to the following.

Notes

  1. If the target User is using Secure Browser / Device Certificate, re-application/approval or reissuance/reinstallation is required.
  2. If you want to change the UPN, please refer to the following article.
    [Access Control] Procedure for Changing a User's Microsoft 365 UPN (Microsoft 365 ID)
  3. The content of this article is based on the product specifications as of August 2026, and may be subject to change without notice.

Table of Contents

  1. When synchronizing from Active Directory to Access Control and Entra ID
  2. When synchronizing from Access Control to Entra ID

When synchronizing from Active Directory to Access Control and Entra ID+

  1. On the HENNGE Directory Sync Tool execution server, stop the Windows service [HDE One Directory Sync].
  2. Delete the old target User from [Access Control Administration] - [Users].
  3. In Active Directory, modify the Attribute value mapped to the username in Access Control.
  4. On the HENNGE Directory Sync Tool execution server, start the Windows service [HDE One Directory Sync].
  5. Confirm that the new target User has been created in [Access Control Administration] - [Users].

*If password synchronization is not being performed, or if the User is excluded from password synchronization, open the new target User in [Access Control Administration] - [Users] and set the Password manually.
[Access Control] Forcing a Password Change for a User

*The [Attribute mapped to the Access Control username] is the Attribute specified in [attr_id=] in the [config.ini] file located in C:\Program Files\HDE One Directory Sync\ on the [HENNGE Directory Sync Tool execution server].

*If the old target User was using Secure Browser / Device Certificate, re-application/approval or reissuance/reinstallation is required.

When synchronizing from Access Control to Entra ID+

  1. From [Access Control Administration] - [Sync Logs], check approximately what minute of each hour synchronization is performed.
    *Please carry out the following steps consistently, avoiding the time period during which synchronization is being performed.
  2. In [Access Control Administration] - [Users], delete the old target User.
  3. In [Access Control Administration] - [Users], create the new target User.
    *Please make the settings identical to those of the old target User, except for the [Username] field.
  4. In [Access Control Administration] - [Provisioning Settings] - [Synchronization from Access Control] - [View Details], run [Dry Run] for the relevant domain and confirm that there are no unintended Delete users.
  5. In [Access Control Administration] - [Provisioning Settings] - [Synchronization from Access Control] - [View Details], run [Sync Now] for the relevant domain.
  6. In [Access Control Administration] - [Users] - the new [target User] - [Edit], confirm that a string is displayed in [Microsoft Immutable ID].

*If the old target User was using Secure Browser / Device Certificate, re-application/approval or reissuance/reinstallation is required.

Translation Disclaimer

This article has been automatically translated from the original Japanese version for your convenience.
While we strive to ensure accuracy, we cannot guarantee its reliability or completeness.

In the event of any discrepancies or questions regarding the content, the official Japanese version shall prevail.