Populate dropdown menus using an ARS policy

Question

Hi, 
 
 I'm looking for a way to update an ARS policy via a schedule. 
 
 At the moment we populate dropdown menus in IAM Websites using onGetEffectivePolicy but it slows down accessing a user object (13 seconds to open). Adding the values to an ARS policy works perfectly (2-3 seconds to open) but these values need to be updated daily. 
 
 I found the following sample code but I think it is for an older version of ARS as it doesnt work. We are currently on 7.2.1. 
 
 https://www.quest.com/community/one-identity/active-roles/product-knowledge/w/wiki/47/powershell-update-property-generation-and-validation-policy-with-a-new-possible-value-list 
 
 Any ideas appreciated. 
 
 Justin

Richard.Lambert · Accepted Answer

##----- get the policy object from ARS ----- $obj = [ADSI]'EDMS://CN=ADSITest,CN=DevOps,CN=Administration,CN=Policies,CN=Configuration' ##----- Set this variable to the specific policy name within the Policy Object $PVGName = "Validates the 'Description' property values for 'User' objects" ##----- Type 35 is PVG policy and rule name = 2 is the setting for the drop-down list $PVGPolicy = $obj._NewEnum | where {$_.Type -eq 35 -and $_.Name -eq $PVGName} $PVGSetting = $PVGpolicy | where {$_.name -eq 2} ##----- convert the string to XML ----- $xml = [xml]$PVGsetting.Value ##----- get possible values from the XML ----- $values = $xml.PVGRules.PVRuleItem.value | %{$_.'#text'} ##----- add a new possible value and sort ----- $values = $values + 'zzz' | sort ##----- update the XML with the new possible values ----- $xml.PVGRules.PVRuleItem.InnerXML = $values | %{ '' + $_ + '' } ##----- get string with the new rule ----- $rule = $xml.OuterXml ##----- update the PVG rule ----- $PVGSetting.Value = $rule ##----- apply changes to ARS ------ $obj.CommitChanges()

Endpoint Privilege Management

Populate dropdown menus using an ARS policy

Top Replies