• getting some error "an error occured during the last operation.Error:EDMS://Schema/edsvalsUnixEnabled Object:CN:IT-apps,OU=User-Managed,0U=Groups,DC=XYX,DC=Com" while access any group from ARS web interface webconsole Admin

    Hello ,

    Facing issue for users that when a user login  to webadmin using browser ,User can able to access the web console interface and able to see list of all users but user tried to click particular group to check properties or do any operation when…

  • issue in workflow default approval by primary owner manager

    Hello

    I am trying use the existing default workflow: approval by primary owner (manager )and its enable.
    how to test this workflow.

    thanks
    Richa

  • is way to get list of links that applied to Managed units and policies in file

    hello

    is way to get list of links that applied to Managed units and policies in file.

    import and export will not work in linked objects that need to be done manually ,is way to it using automate way like script

    thanks

    Rich

  • is any Configuration transfer Wizard documentation available apart from administrative guide pdf

    hello,

    if anyone has worked or experience on Configuration transfer Wizard  ,can provide the related links ,suggestion and guidelines .

    It would be great before build migration planning of ARS objects.

    Thanks
    Richa

  • how to export the ARS objects in .arxml format so it imported in same file format.

    Hello,

    I tried to export some of object from Active role console .It is exported in txt file as option available in ARS,When Tried to import ,it will take .arxml format.

    How to export and import in same format .

    Thanks

    Richa

  • best practices for using Configuration Transfer Wizard to migrate in new environment

    Hello,

    What are the best practices or steps to follow while using the Configuration Transfer Wizard and the Deployment Wizard?

    like what object should be moved first and what can be done in case of failure in the deployment phase..

    please share KB and related…

  • how to migrate policies from one ARS to Another ARS that install in another domain

    Hello Experts,

    We have an old environment where ARS installs and manages users and groups .Going to create new environment where policies need to new environment.

    how to migrate the old policies to new domain environment.

    thanks

    richa

  • Copy groups a domain user A belong to to another domain user in the same domain, with a selection of the groups to copy

    Hi Experts,

    Completely new to ARS / ARSWeb, I would need some details about the task I've been assigned to:

    - ARS : version 7.5

    In One Identity Active Roles Web 7.50, how can I create a form to allow an admin user to copy groups with a selection…

  • Active Roles Server 7.5 / Create a custom script

    Hi all, completely new to ARS / ARSWeb, I would need some details about the task I've been assigned to :

    - ARS : version 7.5

    In One Identity Active Roles Web 7.50, how can I create a form to allow an admin user to copy groups with a selection (not…

  • Group Owner lookup tool

    I have form that I am using with an attribute that is a DN syntax for Group Owner lookup. The user can go into the search tool for DN syntax attributes and search for objects.

    The form type is a new object with class of Group. So far it's the only way…

  • Dynamic Group Executing server

    Hello Experts,

    I have a need to ensure all Dynamic groups are executing off of only 3 servers in my environment.

    I have 6 ARS servers and have a script to move them to the other servers not a problem. I'm wondering if there is a policy or a workflow that…

  • Allow Delegated IT Staff to Unmap Accounts (Synchronization Service) or Script it

    Hello,

    I am looking for ideas on how to best allow other IT team members to "unmap" Active Directory accounts from various Synchronization Service Workflows.  Currently only ARS Admins have the ability to do this but I would like to extend this…

  • Automating user process - retrieve initial password

    Hi, 

    We have setup some new user automation however we would like to store the users initial password somewhere so that we can then send this via email to the IT Technician setting up the users account.

    Does anyone know where this attribute is stored…

  • Computer Dynamic Group Membership Rule Distinguished Name

    Hello,

    I want to create a dynamic group including all computers with a Distinguished Name containing "CRETEIL".
    Unfortunately, the membership rule "Computer distinguishedName Contains CRETEIL" doesn't return any items while many computers have…

  • Uncheck and Disable 'Creation of Mailbox' option in Contact creation wizard

    Hello,

    I'm have tried below script in policy to uncheck and disable 'Create a mailbox' option in the contact creation wizard but its not reflecting on the screen.

    function onGetEffectivePolicy($Request)
    {
    if($Request.Class -ne "contact"){return…

  • Cross domain members don't inherit group delegated rights

    Hello,

    I have two ARS managed domains which are in the same forest. Let's pretend domain1 and domain2.

    I also have two groups, domain1\read-domain1 and domain2\read-domain2 which have the rights "All Objects - Read All Properties" respectiv…

  • Azure AD Questions

    Hi all,

    I am new to One Identity products and possibly looking at purchasing Active Roles to automate new user requests from Service Now but I have a few questions that i hope you can help me with:

    Environment

    We currently create users on our on premise…

  • Set Active Roles (ARS) Scheduled (PowerShell) Script Modules to Execute in PWSH.exe (v6+) vs POWERSHELL.exe

    How can I explicitly instruct ARS to execute scripts in PowerShell v7

  • Procedure In-Place Upgrade AR from version 7.4 to 7.4.3

    Hi.

    When in-place upgrade procedure is performed then ActiveRoles creates a new database each time ?

    When I change current database I get the error - 

    [InsertArServiceRecord] :Error Generated. Details: System.Data.SqlClient.SqlException (0x80131904): Violation…

  • Specify a friendly name for ARS Service Connection Point

    Is there a way to specify a friendly name for the service connection point that ARS Administration service creates in AD?  We name our servers in a complex way (like aaa-bbb-ccc-###) and it would be nice if I could specify a name like (ars01 or ADManagement01…

  • Active Role Synchronization for GAL entries

    Hello,

    I'm hoping someone can provide any information or experience on syncing a GAL between two Exchange environments.

    Right now I am just creating a contact in the target domain using a user account info from the source and giving the contact the…

  • SAML Error Unable to uniquely identify the user using provided claims Federation Authentication with Azure AD (327057)

    We continue to see the error described here support.oneidentity.com/.../error-unable-to-uniquely-identify-the-user-using-provided-claims-federation-authentication-with-azure-ad

    Our on-prem UPN and AzureAD UPN are different, so we are using the feature…

  • Active Roles Web UI boolean value default to true

    Is there a way in the ARS web ui to set a virtual attribute boolean value to a default?  I have a boolean VA on a web form that isn't populated.  Not all users are created by the sync service, so I need this attribute to default to true, regardless…

  • Access denied managing two domains on single ARS server

    I have ARS configured on one of our domain (abc.com), we had a request to setup ARS for an another domain. We want to have both the domain setup on the same ARS Server & both the domain appear & manage under the same ARS website.

    I've added the…

  • ARS - Replication status "unknown" / Publisher - Subscriber

    Hi, 

    I have two ARS servers and two DBs, configured one of the ARS servers and promoted it as Publisher.
    I then added the second server as subscriber.

    Both ARS servers 2016 are running under version 7.4.3.110, SQL servers are 2016.

    In the ARS console, under…