• State Verified Answer
  • Replies 5 replies
  • Answers 1 answer
  • Subscribers 65 subscribers
  • Views 422 views
  • Users 0 members are here
Options
Related

How to extract value associated with a virtual attribute with Get-QADUser cmdlet?

dae yoon
22 days ago

After importing ActiveRolesManagementShell module into powershell script, I was able to run Get-QADuser cmdlet successfully.  From this article, Get-QADUser Reference – iTomation I found different ways of using Get-QADUser cmdlet.

I am looking for a way to extract value associated with a virtual attribute like edsvsa-* but I failed to find right options to pass as positional arguments to this cmdlet.

Ex) Get-QADUser -Identity "xxxx" -IncludedProperties "edsvsa-ABC-EFG"

By the way, this specific virtual attribute of a target user I see it as empty from web based Active Roles interface. I would appreciate a seasoned AR engineer to shed a light for me.

Please bear with me unintended 2nd question piggyback to this question.

I plan to use Set-QADUser cmdlet to populate data for a virtual attribute. May I see an example of it?

Thank you for your time reading this post.

  • 0 22 days ago

    Use -proxy:

    Get-QADUser -Identity "xxxx" -IncludedProperties "edsvsa-ABC-EFG" -proxy

    Alternative, connect to Active Roles first:

    Connect-QADService -proxy

    Get-QADUser -Identity "xxxx" -IncludedProperties "edsvsa-ABC-EFG"

  • +1 22 days ago

    The Active Roles Management Shell integrates with the standard PowerShell Help options.

    To see samples and more detail on any cmdlet, try this:

    Get-Help Set-QADObject -ShowWindow

    The parameter that you need is documented there:


    -ObjectAttributes <ObjectAttributesParameter>
    Specify an associative array that defines the attributes to set. The array syntax:

    @{attr1='val1';attr2='val2';...}

    In this syntax, each of the key-value pairs is the LDAP display name and the value of an attribute to set. Thus, passing the @{title='Associate';l='Paris'} array to the ObjectAttributes parameter causes the cmdlet to set the 'Job Title' attribute to 'Associate' and the 'City' attribute to 'Paris'.

  • 0 22 days ago in reply to Terrance.Crombie

    Terrance, 

    Bear with me. I wonder if you could assist me with deciphering following return messages.

    with first option having -Proxy returned following exception:

    Get-QADUser : Invalid syntax (exception from HRESULT: 0x800xxxx (MK_E_SYNTAX)) At C:\path\test.ps1 char:9

    Ex)
    $user = Get-QADUser -Identity "domain\dae" -IncludedProperties "edsva-ABC-EFG" -Proxy

    Write-Output $user

    ---

    with 2nd option returned following exception:

    Connect-QADService: Invalid syntax (Exception from HRESULT: 0x800xxxx (MK_E_SYNTAX))

    ex)

    Connect-QADService -proxy

    $user = Get-QADUser -Identity "domain\dae" -IncludedProperties "edsva-ABC-EFG"

    ---

    with 3rd option, same error response from 2nd option returned 

    ex)

    Connect-QADService -Service "FQDN_of_Server" -proxy

     

  • 0 21 days ago in reply to dae yoon

    This appears to be relevant:

    Solution Title: Connect-QADService: Invalid syntax

    Solution Number: 4250140

    Solution URL: https://support.oneidentity.com/kb/4250140 

  • 0 21 days ago in reply to Terrance.Crombie

    good morning Terrance, you are correct! I wasn't aware of it at the time I posted this question. I need to find out how to match version between AR management shells and AR Administration Service.