• Exclude OU from Managed Domain

    Hello -

    I've inherited an Active Roles installation on an AD domain so I'm still learning some of the ins and outs of it.

    I have a need to create an OU structure, within our existing managed domain, that is not managed by Active Roles.  So, effectively…

  • PGV-Policy using EDS-Azure-GuestUser Virtual Attributes

    Hi guys,

    I'm currently trying to build a guest account invitation process in ARS (8.1.5.) and added several new virtual attributes to the "EDS-Azure-GuestUser" class.

    Is there a way to add those attributes to a policy? When I select "EDS…

  • How to connect to SCIM without Starling?

    Hi all. Is there a way to publish data (write-back or outbound events) from ARS to an SCIM endpoint?

    AFAIK the SCIM connection can only be used as source.

    Any thoughts?

  • ARS integrated to middleware layer

    So, customer is interested in using ARS to connect to a middleware through some kind of not yet defined protocol (SCIM maybe?) in order to do user management and provisioning for multiple systems.

    Rules for each system will remain in middelware layer…

  • How to configure just-in-time-privileges in Active Roles and Safeguard?

    Hi,

    I want to configure just-in-time-privileges so that when I check out an AD-account in Safeguard SPP this account will be enabled and configured as a member of a group in AD, i.e. Domain Admins. I find several videos and demos describing this, but…

  • Vi zai shk kv cj osey shaz ov vm vbs kh gk kase vbs mv zee

    Gi w og waj off fi osukh vbs kv vk kh gi gesi og  zeb bheed if garib esn mg zade

  • Windows 11 and QAD PowerShell

    Getting an issue with QAD Powershell Cmdlets in Windows 11, running ARS 8.1.5:

    The below works fine when ran from the ARS (Windows 2022) Server - all Deprov tasks complete as per the deprovisioning policy based on the Managed Unit:

    Connect-QADService -Service…

  • Copy additional attributes on user copy with Powershell script OnPostCreate?

    Hi,

    I have been trying to get additional attributes (description f.e.) when copy a user from Web Interface, but with $Request method on a Powershell script it's has been impossible to get the source object.

    I finally used the VB scipt that is at the…

  • export result of managed unit (user objects)

    I created a Managed Unit with multiple Include queries.  The result shows me the display name, distinguished name and SAM account name of user objects.

    Is it possible to export (powershell) this list to a CSV file?

  • AD Group Deletion Delay

    ForBrokerCoreSystem, we have removed group: InfoDir-BrokerCore-PROD-CaseManager in Jan 2023, however it is still in the active roles group. If this is a delay in the system, could you please help remove this group as well as the users ASAP?

  • Getting "Access is denied" error during exporting the user class Unix properties.

    Hi Team,

    we are using the ARS command Get-QADUser for the target domain and the PowerShell command Get-ADUser for the source domain to synchronize UNIX attribute values from the source to the target. The script flow is as follows for UNIX attribute synchronization…

  • Getting "Access is denied" error during exporting the user class Unix properties.

    Hi Team,

    we are using the ARS command Get-QADUser for the target domain and the PowerShell command Get-ADUser for the source domain to synchronize UNIX attribute values from the source to the target. The script flow is as follows for UNIX attribute synchronization…

  • Password Sync Rule - Retry timing

    Hello,
    Hope everyone is having a good holiday season.

    Does anyone know if there is a way to set the password sync rule retry option on a small delay? 
    Any help on this is appreciated.

    Thank you,

    Lu

  • Active Roles Workflow - After Entra/Azure Object Is Created

    Hello,

    I am looking to Execute an Active Roles Workflow after the creation of an Entra Object. Is this supported? I don't see a place to scope in "Azure" when building out the Workflow policies.

    It would be as simple as something like onPostCreate…

  • How to disconnect Client sessions every nights

    Someone knows how to scheduled a task to disconnect/kill Active Role server user sessions on a daily basis ?

  • Where to check the Azure certificate in Active Roles 8.1.3

    Hi,

    I had a record that out client secret was expiring soon and went to renew it but it looks like in Azure that it uses a certificate instead of a secret, and that isn't expiring for another year.  Apologies for the daft question but how to I check…

  • Can Active Roles display the Places attributes for rooms?

    Hi,

    I'm looking into using Active Roles to create/update Rooms in Places/Room Finder.  The main attributes and Capacity etc are fine but there are attributes for audio, video and wheelchair accessible which don't seem to be accessible to Active Roles…

  • Delete Email

    Hello All, I have a need to user Active Roles cmdlets to script the mailbox disablement of DL's and Users. I have the user one but not sure what to use for Groups.

    User Mailbox disablement: (This works)

    Set-QADUser -Identity $userObj -Proxy -ObjectAttributes…

  • Alert email from Group Change Alert is empty sometimes

    It's been happening intermittently that the Report.html file on the Group Change alert email is being delivered empty.

    The changes are being captured on the Change History but eventually a Group Owner will get the attached report empty.

    First thought…

  • Error: Could not load 'System.IdentityModel.Tokens.JwtSecurityToken' when Connecting to MsOnline Session in Active Roles

    Hello Everyone,

    I am encountering an issue when trying to connect to an MsOnline session using the Connect-MsolService cmdlet within Active Roles.
    If I run the following command separately in a standard PowerShell session, it works as expected:

    Connect…

  • SCIM Integration

    Hello,

    My name is Odelya Fridman and I am working as software engineer at cato networks.

    I created a trial account and trying to create a SCIM integration with Cato application.

    Is there any ability to create SCIM app with this Trial account? 

    Thanks…

  • Passing user object to script in workflow

    Hi

    I'm trying to get a workflow to run which will update extensionAttribute7 of a user object when it's been added to a group, based on the users job title.
    e.g. Joe Bloggs gets added to the group, his title is IT, EA7 needs to be set to "03452…

  • Passing user object to script in workflow

    Hi

    I'm trying to get a workflow to run which will update extensionAttribute7 of a user object when it's been added to a group, based on the users job title.
    e.g. Joe Bloggs gets added to the group, his title is IT, EA7 needs to be set to "03452…

  • Updating user attribute when added to group

    Hi

    I'm trying to get a workflow to run which will update extensionAttribute7 of a user object when it's been added to a group based on the users job title.
    e.g. Joe Bloggs gets added to the group, his title is IT, EA7 needs to be set to "03452…

  • Updating user attribute from workflow using script lookup

    Hi

    I'm trying to get a workflow to run which will update extensionAttribute7 of a user object when it's been added to a group based on the job title.

    e.g. Joe Bloggs gets added to the group, his titlle is IT, EA7 needs to be set to "03452"…