• State Verified Answer
  • Replies 8 replies
  • Subscribers 64 subscribers
  • Views 4828 views
  • Users 0 members are here
Options
Related

"EDSA/EDSVA" meaning

obaji
over 3 years ago

Hi all,

In active directory the attribute edsaAzureGroupDisplayName exist. What does the first 4 characters (edsa) stand for? Is it an acronym or short form of something?

Thanks, Obaji

Parents
  • 0 over 3 years ago

    A legacy name for Active Roles is the "Enterprise Directory Service".

    EDSA is short for "Enterprise Directory Service Attribute" and EDSVA is short for "Enterprise Directory Service Virtual Attribute".

    As a general rule of thumb, an EDSA attribute is computed, and is used to display something in a more user-friendly way. For example: edsaAccountIsDisabled is a Boolean which displays the current disabled/enabled status and allows someone with the necessary access to set that status easily. This is much friendlier than a bitwise mask on the userAccountControl attribute.

    An EDSVA attribute is a virtual attribute which holds some value. For example: edsvaDeprovisionStatus is an enumeration which holds a value which displays the current Deprovision status and allows someone with the necessary access to set that status.

  • 0 over 3 years ago in reply to Terrance.Crombie

    Hi Terrance! Are the EDSA and EDSVA fields you mention above only available in ARS and not available in native AD?

  • 0 over 3 years ago in reply to bdorris

    They are stored in the Active Roles configuration database so you have to access the Active Roles server in order to read them back.  This is most easily accomplished using the Quest PoSh cmdlets but you can also use the ADSI provider which is a more advanced method of coding in PoSh.

    Example:

    Get-QADUser -proxy -Identity "JSmith" -includedproperties edsvaMyVirtualAttributeName

Reply
  • 0 over 3 years ago in reply to bdorris

    They are stored in the Active Roles configuration database so you have to access the Active Roles server in order to read them back.  This is most easily accomplished using the Quest PoSh cmdlets but you can also use the ADSI provider which is a more advanced method of coding in PoSh.

    Example:

    Get-QADUser -proxy -Identity "JSmith" -includedproperties edsvaMyVirtualAttributeName

Children
No Data