don't auto-create groups if 'process_groups' is false

Author: adorton-adobe

docs/en/user-manual/advanced_configuration.md

@@ -785,6 +785,8 @@ following conditions are true:
 
 1. Group is targeted for at least one user
 2. Group does not currently exist
+3. The `--process-groups` command argument is set (or the equivalent
+   invocation option)
 
 New groups are always created as user groups.  The UMAPI does not
 support product profile creation, so the Sync Tool can't create them.

examples/config files - basic/1 user-sync-config.yml

@@ -218,6 +218,8 @@ directory_users:
   #   NOTE: auto_create applies to any targeted Adobe group that doesn't exist.
   #         This includes groups targeted through group mapping, extension config,
   #         and the additional_groups functionality.
+  #   The --process-groups command argument or equivalent invocation setting must
+  #   be enabled for groups to be auto-created
   # group_sync_options:
   #   auto_create: False
 

user_sync/rules.py

@@ -176,7 +176,8 @@ def run(self, directory_groups, directory_connector, umapi_connectors):
         umapi_stats = JobStats('Push to UMAPI' if self.push_umapi else 'Sync with UMAPI', divider="-")
         umapi_stats.log_start(logger)
         if directory_connector is not None:
-            self.create_umapi_groups(umapi_connectors)
+            if self.options.get('process_groups'):
+                self.create_umapi_groups(umapi_connectors)
             self.sync_umapi_users(umapi_connectors)
         if self.will_process_strays:
             self.process_strays(umapi_connectors)