• State Verified Answer
  • Replies 5 replies
  • Answers 1 answer
  • Subscribers 65 subscribers
  • Views 431 views
  • Users 0 members are here
Options
Related

How to extract value associated with a virtual attribute with Get-QADUser cmdlet?

dae yoon
23 days ago

After importing ActiveRolesManagementShell module into powershell script, I was able to run Get-QADuser cmdlet successfully.  From this article, Get-QADUser Reference – iTomation I found different ways of using Get-QADUser cmdlet.

I am looking for a way to extract value associated with a virtual attribute like edsvsa-* but I failed to find right options to pass as positional arguments to this cmdlet.

Ex) Get-QADUser -Identity "xxxx" -IncludedProperties "edsvsa-ABC-EFG"

By the way, this specific virtual attribute of a target user I see it as empty from web based Active Roles interface. I would appreciate a seasoned AR engineer to shed a light for me.

Please bear with me unintended 2nd question piggyback to this question.

I plan to use Set-QADUser cmdlet to populate data for a virtual attribute. May I see an example of it?

Thank you for your time reading this post.

Parents
  • +1 23 days ago

    The Active Roles Management Shell integrates with the standard PowerShell Help options.

    To see samples and more detail on any cmdlet, try this:

    Get-Help Set-QADObject -ShowWindow

    The parameter that you need is documented there:


    -ObjectAttributes <ObjectAttributesParameter>
    Specify an associative array that defines the attributes to set. The array syntax:

    @{attr1='val1';attr2='val2';...}

    In this syntax, each of the key-value pairs is the LDAP display name and the value of an attribute to set. Thus, passing the @{title='Associate';l='Paris'} array to the ObjectAttributes parameter causes the cmdlet to set the 'Job Title' attribute to 'Associate' and the 'City' attribute to 'Paris'.

Reply
  • +1 23 days ago

    The Active Roles Management Shell integrates with the standard PowerShell Help options.

    To see samples and more detail on any cmdlet, try this:

    Get-Help Set-QADObject -ShowWindow

    The parameter that you need is documented there:


    -ObjectAttributes <ObjectAttributesParameter>
    Specify an associative array that defines the attributes to set. The array syntax:

    @{attr1='val1';attr2='val2';...}

    In this syntax, each of the key-value pairs is the LDAP display name and the value of an attribute to set. Thus, passing the @{title='Associate';l='Paris'} array to the ObjectAttributes parameter causes the cmdlet to set the 'Job Title' attribute to 'Associate' and the 'City' attribute to 'Paris'.

Children
No Data