Dynamic Bound List Boxes using XML file

Question

I'm trying to implement a Bound List Box following the guidance at the following link - https://support.oneidentity.com/active-roles/kb/139754/how-to-create-a-bound-list-box-with-4-levels Hard-coding the possibilities in the script works but I would like to use an XML file as the source for the Level Possibilities. The issue is that the values change periodically and we would rather update a source XML rather than periodically edit the script itself. Has anyone modified the script provided in the KB to use an XML rather than hard-coding the values?

Terrance.Crombie · Answer

I re-implemented the SDK sample by populating from an XML file. Here is the sample XML file: SD Engineer SD Manager QC Engineer QC Manager Salesperson Sales Manager CS Representative CSR Manager Save this to the following location on the Active Roles host: C:\Scripts\orgChart.xml Here is a working Policy Script: function onGetEffectivePolicy($Request) { if($Request.Class -eq "user") { $ScriptDir = 'C:\Scripts\orgChart.xml' [xml]$XML_Variable = Get-Content -Path $ScriptDir $departmentsArray = @() $possibleValues = @() $xmlDepartments = $XML_Variable.Departments.Department $departments = $xmlDepartments.name $Request.SetEffectivePolicyInfo('title', $Constants.EDS_EPI_UI_RELOAD_EPI_BY_RULE, 'department') $Request.SetEffectivePolicyInfo('department', $Constants.EDS_EPI_UI_POSSIBLE_VALUES, $departments) $department = GetCurrentValue -Request $Request -AttributeName 'department' ($xmlDepartments | Where-Object{$_.name -eq $department}).title | forEach-Object{ $possibleValues += $_.toString()} $Request.SetEffectivePolicyInfo('title', $Constants.EDS_EPI_UI_POSSIBLE_VALUES, $possibleValues) } } function GetCurrentValue($Request, [string]$AttributeName) { trap {continue} $value = $Request.Get($AttributeName) if($value -eq $null) { $DirObj.GetInfoEx(@($AttributeName),0) | Out-Null $value = $DirObj.Get($AttributeName) } $value } NOTE: All of these Bound List Box samples only work in the Active Roles Web Interface. This functionality is not possible in the Active Roles Console.

Endpoint Privilege Management

Dynamic Bound List Boxes using XML file

Top Replies