Requirements to Create AD Groups with OneIdentity API

Question

Hi, are the requirements for this listed anywhere? Maybe what's required in the body of the post to the ADSGroup entity? Also maybe the permissions required?

Markus Weiss-Ehlers · Answer

You're user need to have insert permission for the ADGroup table and the columns of that table you are setting. You can check the existing permissions in Designer for example.

In regards to the necessary properties, I suggest checking the creation of an AD group in the Object Browser. You most likely need to set the mandatory properties (which can be identified in Object Browser or Designer). These may be different, depending on your configuration and customization but most likely these are the minimum set of properties for a global, security group:

- cn, UID_ADSDomain, UID_ADSContainer, SamAccountName (only if it should be different to cn)