• Working with Attributes from $Request

    I'm trying to get information from $Request variable in Active Roles.

    When a user edits/changes attributes on their user account via the ARWebSelfService web portal, it triggers a workflow which performs a number of checks on the data and includes…

  • Workflow and get attributes than the changed attribute

    Hello, 

    I have this script in a workflow where the trigger is changed attribute extensionattribute1 OR physicaldeliveryoffice. Thing is that When one of these attributes change, the worklow is launche but  the script only can get the changed attributte…

  • setting MFA during account creation

    Hi,

    Another custom script query following the one I had the other week.  We've got a script that switches on MFA to have SMS as the default but doesn't set a number.  We do this as a measure to prevent people who haven't had MFA set up having their…

  • Need to get Deprovision Report sent to user who initiated the action or else be able to get record of changes made

    The Deprovision User has the ability to email a report to a user specified in the Policy.  I like the report that is generated and would like to be able to have it sent to the person initiating the deprovision so that they can attach it to the service…

  • Can't Access Saved Object Properties from Script / Counter Returns Empty

    Hi,

    We're trying to create a workflow that counts every time a user enables or disables another user every day (workflow trigger is the modifivation of edsaAccountIsDisabled). (the counter resets every day.) If the counter reaches 20, the action requires…

  • Workflows with if-then, PowerShell scripts, and $work.SavedObjectProperies

    Hi,

    I am working on a workflow to do some automation on our computer objects, and I am running into a weird issue that I am struggling to wrap my head around.

    The error I am receive:

    Executing the 'Run script: DEV New Computer Object Tag Location on…

  • Workflow Approvals

    We currently have a workflow approval that checks the Manager of the requestor is populated.  However, we have a new scenario where we want to use the Secondary Owner instead of the Manager.  Is this possible?  I have not been able to see this option in…

  • Use workflow script to modify Azure attribute of removed member (disabling)

    Good morning

    I am a beginner in ARS Workflows....

    I have a use case where an account which is synched from AD on-Premise to Azure is disabled on premise and must be immediately disabled on Azure without waiting for next the AAD synch run.

    i know how to…

  • Multiple issues regarding attributes

    I created a virtual attribute and linked it to a class that isn't a user or a group. It's actually a class that was implemented through a schema extension. I also created a workflow policy and the first step is to search for objects of this class. Unfortunately…

  • Can Active Roles perform WMI queries

    Hi,

    I'm working on a way to filter devices based on their type (laptop, tablet, desktop) to move them into a corresponding OU.  I've done this before using the parent OU or name but in my new situation all devices will be in one big OU to start so…

  • Approval workflow email sending is not working?

    I have configured properly the Defailt mail settings, added this link https://outlook.office365.com/EWS/Exchange.asmx and mailbox credentials. Is there any changes to configure or something new happening?

  • Trigger Workflow on Computer Domain Join

    Hi,

    *Disclaimer* I am still really new to workflows, so I apologize if this is a stupid question or has been answered already.

    I am in the very early stages on designing a workflow that would modify a virtual attribute on computer objects with a value…

  • Dynamic Group Executing server

    Hello Experts,

    I have a need to ensure all Dynamic groups are executing off of only 3 servers in my environment.

    I have 6 ARS servers and have a script to move them to the other servers not a problem. I'm wondering if there is a policy or a workflow that…

  • email notification not working in approval by primary owner workflow

    I am testing the built-in Approval by Primary Owner workflow and the request\approval process is working as expected. I enabled the email notification in the Approval rule. However, notification didn't seem to be sending out (not seeing it from the mail…

  • group membership approval workflow request question

    I am trying to setup the approval by primary owner workflow for group membership change. However, it didn't seem to work and I am hoping to get some help here. This is a new AR 7.4.3 setup without too much customization. 

    What I did

    Defined the primary…

  • regular users is unable to see AD object through web interface

    I am trying to implement the request\approval workflow for group membership in our organization. I enabled group owner to the group and the related workflow (builtin Approval by Primary Owner). When I tried to test the workflow by logging in as some regular…

  • How to execute worfklow per operation?

    Hello

     

    My goal is to limit the number of members added to a group, for example: I have a group with 4 members, and I set a limitation value of 5 (the value is set in extension attribute 1)

    I created a workflow with the operation: “add member to group…

  • Update AD users employeenumber based on csv file

    I am currently using a workflow to update from field EmployeeID to EmployeeNumber.  Basically I am adding a letter in front of the employeeID to create employeeNumber.

    Ex. employeeID "123456" become employeeNumber "A123456"

    it working…

  • Policy error returned on task approval

    Hello,

    I've an ARS farm with 2 servers, SERVER1 and SERVER2, they are accessed by an alias prd-ars.domain.com 

    I've set approval by primary owner on one group and modified the policy (Approval by Primary Owner (Manager)) to send notifications with…

  • Is there a way to add/remove users from groups using csv file?

    I have a process to add/remove users from groups everyday.  I currently use Dovestone's AD Bulk Users.  It's cumbersome to manage and has limitations.   I'd rather use Active Roles instead if possible.

    I tried the Synchronization tool, but haven…

  • Automatic assigned group

    Good morning.

    We have defined a workflow in which, given a certain condition, the created users are added to certain groups or not. 

    However, I cannot find out why a specific group is added to any created account, no matter what I specify on the workflow…

  • Saved object properties in workflow

    Hi,

    Does anyone know if its possible to have two saved object properties in a single workflow. 

    To give context, the first saved object is configured for "Workflow target" (i.e. the user) and targets email address, company etc. 

    The second…

  • Set-QADUser failing with variable??

    I have this script in a workflow and this line fails when I use a variable

    set-Qaduser -identity agntest\$usr -ObjectAttributes @{employeetype = $UserEmpType}

    If I put text it works fine.

    set-Qaduser -identity agntest\$usr -ObjectAttributes @{employeetype…

  • set-QADUser Question Help

    Anybody know how to use Replace with set-QADUser?

    Trying to switch email suffix on users through a workflow. 

    $workflow.ActivityTarget("CreateDev511Account") is the name of the activity target. The workflow creates a user earlier with the old…

  • How to Copy user and create in different Domain with workflow[ or policy.

    Our ARS manages both Dev and Prod. We get requests for users to be created in Dev domain which has to have the same FirstName,LastName,SamAccountName and a few other attributes as PROD. How would I create a process for Admins to search the Prod user name…