• Active Roles - powershell script module: "The Expression after '&' in a pipeline element produced an object that was not valid. It must result in a command name, a script block, or a CommandInfo object"

    I have a simple script that basically queries an OU in AD, obtains the samaccountnames of those users. And then deletes the contents of the users folder based on their samaccountname, excluding a few folders etc...

    SCRIPT

    $OUPath = '<domain name>/Student…

  • Working with Attributes from $Request

    I'm trying to get information from $Request variable in Active Roles.

    When a user edits/changes attributes on their user account via the ARWebSelfService web portal, it triggers a workflow which performs a number of checks on the data and includes…

  • get-qaduser stop on error

    When using 'get-qaduser samaccountname' if the samaccount name is not valid,  no error is thrown it just does not return anything

    Is there a way to make it return an error if the samaccountname is not valid?

  • How do I query for AD groups which were created or updated yesterday?

    Hi,

    I'm trying to work out how I can query/filter AD groups which were created or updated yesterday? The below works as intended for created groups but I can't find anything that allows me to query for updated date? The below is part of a larger script…

  • Unable to modify attribute in onPostCreate

    Hello,

    I am trying to modify the attribute ""edsvaSendAsTrustees" in $DirObj in the function onPostCreate. My PowerShell function that is called in the onPostCreate looks like this:

    #===================================================…
  • onPostModify Is there a way to retrieve a list of all attributes that were modified?

    I attempted to use $Request.RequestedAttributes in the script but onPostModify this is blank. I've looked through the SDK and Sample Scripts on the oneidentity website and haven't found anything that does this. Does anyone have any ideas?

    I just…

  • Can't Access Saved Object Properties from Script / Counter Returns Empty

    Hi,

    We're trying to create a workflow that counts every time a user enables or disables another user every day (workflow trigger is the modifivation of edsaAccountIsDisabled). (the counter resets every day.) If the counter reaches 20, the action requires…

  • Workflows with if-then, PowerShell scripts, and $work.SavedObjectProperies

    Hi,

    I am working on a workflow to do some automation on our computer objects, and I am running into a weird issue that I am struggling to wrap my head around.

    The error I am receive:

    Executing the 'Run script: DEV New Computer Object Tag Location on…

  • retrieve PowerShell command in web interface

    I have script in workflow to check LAPS password from ms-Mcs-AdmPwd and send it to initiator mail,
    The workflow in WI task. it's possible to retrieve the password to Web Interface and not to mail?

  • Active Roles Web Interface Quick Search fails after upgrade to LTS 8.0.1

    Hi

    I just updated to ActiveRoles 8.0.1 LTS from 8.0.0 LTS according to this guide:

    https://support.oneidentity.com/active-roles/kb/4371505/how-to-upgrading-to-active-roles-8-0-x-lts-from-8-0-0-lts-or-later-using-in-place-upgrade-method

    During the upgrade…

  • Can Active Roles take advantage of PowerShell version 7?

    I was writing some code and it worked fine on my desktop. However, when I imported it into active roles, there were portions not functioning appropriately.

    Turns out I was testing my code in PowerShell 7. As far as I can tell, Active Roles uses version…

  • Multiple issues regarding attributes

    I created a virtual attribute and linked it to a class that isn't a user or a group. It's actually a class that was implemented through a schema extension. I also created a workflow policy and the first step is to search for objects of this class. Unfortunately…

  • PowerShell - Access Template - checkboxs for apply permissions onto

    The command being leveraged is:

    New-QARSAccessTemplateLink -AccessTemplate $AccessTemplate -DirectoryObject $DirObj -Trustee $TrustedGroup -Proxy
    What additional parameters are required to remove "Child objects of this directory object" selection (uncheck…
  • How to connect to ARS v8 from PowerShell?

    I have the following function in PowerShell:

    Function Get-ARSServers {

    $searchRoot = "CN=Enterprise Directory Manager,CN=Aelita,CN=System,$([System.DirectoryServices.ActiveDirectory.Domain]::GetCurrentDomain().GetDirectoryEntry() | Select-Object -ExpandProperty…

  • What is the command to remove a user from AD group using Remove-QADGroupMember from the same domain and aswell as different domain?

    What is the command to remove a user from AD group using Remove-QADGroupMember from the same domain and aswell as different domain?

  • Backsync assignedPlans

    Hi,

    As per this KB, the attribute assignedPlans can't be found when trying to create a sync rule.

    I'm trying to write a PowerShell script to extract assignedPlans for my customer to sync:

    $aplans = $srcObj["assignedplans"] -all
    $aplans…

  • Synchronization service powershell write to datetime attribute error

    Hello,

    I have been trying to script getting a datetime from MS Graph and output this to a virtual attribute (configured as general time) in Active Roles, but every time I receive the same error, no matter what I do:

    "The string was not recognized as…

  • Get Users of Dynamic Groups

    I have a dynamic group called F_AllManagers. It is made up of multiple dynamic groups. I need to get a list of the actual users from the multiple dynamic groups that make up the F_AllManagers. How can this be done in Quest Powershell?

  • Upgrade question for ARS 7.6.1 and MS Teams Module. Which version to install?

    Getting ready to do an upgrade. I have a question about the MS Teams Powershell module supported by ARS 7.6.1.

    Active Roles Product Notification (oneidentity.com)

    Based on the above product notification, we need to install MS Teams Powershell module 4…

  • Reset Passwords for users in a specific OU

    Hi There

    we have a new HR system that is using Powershell to Create users. Unfortunately, this does not output the passwords so we cannot send them to the managers.

    Is there a way to reset the passwords for any users that get created in this OU using…

  • Virtual Attribute update from ARS Sync or Set-QADUSer

    Hello,

    I have a new virtual attribute that I need populated for 34k users. Can you tell me the quickest way to accomplish this?

    I've tried via Active Roles Sync from a SQL Table and also took the data from the table and used "Set-QADUser -Proxy -Connect…

  • How to change one common attribute for multiples groups using csv.

    How to change one common attribute for multiples groups using csv.

    i have around 2000+ groups which need to have a attribute updated. How can we achieve this.

  • Update Virtual attribute value based on another Virtual attribute value change.

    Hello,

    I'm having a requirement, we created couple of Virtual attributes in Active Roles and if we change a value of VA1 and then dynamically update the value of VA2. 

    VA1 - Dropdown field

    VA2 - String field

    Do let me know if you need more information…

  • anyone use CURL.exe from Windows env to access ARS SPML ? seeing issue with auth

    I used a script to confirm availability of the SPML provider and operational status by returning attributes of an object from all 4 configured ARS  SPML hosts.

    Powershell query to return data works ... however the customer team uses VMWare Orchestration…

  • Time of ARS doesn't match the time of the server

    Hello. I am not sure what is wrong here Slight smile

    I am trying to manage temporary membership for groups using a powershell script. However, the times used differ between the current time (time of the server where ARS is installed) and the time that the Change…