• State Suggested Answer
  • Replies 4 replies
  • Answers 1 answer
  • Subscribers 66 subscribers
  • Views 113 views
  • Users 0 members are here
Options
Related

How to write extension attribute populated in AD to ARS?

dae
3 days ago

I am new to Active Roles.  I have a task to write or populate AD attribute and its associated data to ARS (Active Roles). My quick research told me that I should import module of Active Role Management Shell however having trouble to load it due to no valid module file was found in any module directory.  Further investigation led me to https://support.oneidentity.com/active-roles/kb/4340743/how-to-load-the-active-roles-management-shell-in-a-powershell-session this article, but I ran into another stumbling block with No Snap-ins have been registered for Windows Powershell version for Add-PSSnapin cmdlet. I like to hear your advice/thought to verify or confirm I am in the right path to achieve the goal I described. I'd appreciate your advice on this. Thank you!

Parents
  • 0 5 hours ago

    The correct cmdlet that you should be running to work with any modern version of the Active Roles Management Shell is:

    Import-Module ActiveRolesManagementShell

    This cmdlet will only work if you have the Active Roles Management Shell installed.

    The Active Roles Management Shell will be installed on any Windows host that has has the Active Roles Management Tools installed from the primary Active Roles installer.

    The Active Roles Management Shell can also be installed by running Shell_x64.msi from the Active Roles installation media:

    <DRIVE>:\Components\ActiveRoles Management Shell\x64

    You should also install the Active Roles ADSI Provider as well.

  • 0 4 hours ago in reply to Terrance.Crombie

    Terrance.Crombie, thank you so much taking your time to share your advice regarding my question. I was able to find Shell_x64.msi which in turn successfully import aforementioned module.

    I am about to accept your reply as accepted answer.  However I wonder if I could ask you one more question. Now I have Get-QADUser cmdlet is working, I was hoping to retrieve edsvsa-* virtual attributes. What would be the correct syntax? I was referring to this article: Get-QADUser Reference – iTomation trying out various combination to get value of a specific virtual attribute not have been successful.

    I will post separate question for it.

    Have a blessed day!

  • 0 3 hours ago in reply to dae yoon

    The Active Roles Management Shell is capable of communicating directly with an Active Directory Domain Controller via the LDAP protocol and also with the Active Roles Administration Service via the EDMS protocol. Only the Active Roles Administration Service knows about Active Roles Virtual Attributes.

    Unless you have connected to the Active Roles Administration Service using Connect-QADService -proxy first, or unless you include the -proxy parameter in your cmdlet, you are talking to Active Directory and not to the Active Roles Administration Service.

Reply
  • 0 3 hours ago in reply to dae yoon

    The Active Roles Management Shell is capable of communicating directly with an Active Directory Domain Controller via the LDAP protocol and also with the Active Roles Administration Service via the EDMS protocol. Only the Active Roles Administration Service knows about Active Roles Virtual Attributes.

    Unless you have connected to the Active Roles Administration Service using Connect-QADService -proxy first, or unless you include the -proxy parameter in your cmdlet, you are talking to Active Directory and not to the Active Roles Administration Service.

Children
No Data