How to export Access Template to have Property name and LDAP Display Name in a Excel

Can you provide us an example of all the fields you want in your "report" / export?

Yes, I would like to have Property Name and LDAP Display Name use in the Access Template in a Excel file.

Like when we open the Access Template and go to the "Object Properties" tab.

The information displayed under the Permissions tab, which shows the object class, AD native or Virtual attribute names, for an AT are actually stored as GUID values when exporting it from the MMC or when binding to an AT from the PowerShell cmdlet Get-QADObject. If this is the information you are looking to export, it looks like you will have to write an export script to translate these GUID's back into readable names. This list of permissions entries can be a mix of AD native and AR Virtual Attributes.

The attribute that store this information is edsaATEList. A typical entry in this list, which has 5 columns, might look like:

[A;;WP;b7ea1a07-a218-4938-a9bc-ddd7049c9cc1;bf967aba-0de6-11d0-a285-00aa003049e2]

The 4th and 5th columns contain the GUID's of the attribute and object class respectively. If the 4th column is empty then that permission entry rule applies to the entire object class.

You can take the GUID value in the 4th column (if there is one) and pass it into a (Get-QADObject -Proxy -Identity <GUID>).Name command to get the Name of the related attribute. You can also do the same for the 5th column to get the object class Name. Then write this information however you'd like to a text file CSV to them open in Excel.

Hope this help point you in the right direction for getting the desired info from Access Templates.

Thanks Richard,
It seems a bit complicated for my level in Powershell but I'll look into it ;)

Hi Gégé 

Nick.Dollimount published a script to the community for live reporting on Access Template Links (link below), this script has a function within it to decode the edsaATEList values

(+) Access Template Link Reporting - Forum - Active Roles Community - One Identity Community

Hi Gégé 

Nick.Dollimount published a script to the community for live reporting on Access Template Links (link below), this script has a function within it to decode the edsaATEList values

(+) Access Template Link Reporting - Forum - Active Roles Community - One Identity Community