How To Populate Dynamic Role With AD Group Members

Question

Hoping someone can help out with this as I don't even know where to begin. 
 
 I want to build a dynamic role which pulls in the members of certain Active Directory Groups. Let's say I have two Active Directory Groups: GROUPA and GROUPB. My goal would be to have the dynamic role filled with the user's from each group. 
 
 Does anyone have an SQL snippet example they could share?

George Cerbone · Accepted Answer

You can build this pretty easily with the wizard: 
 
 Which builds the SQL: 
 (UID_Person in ( select UID_Person from UNSAccount join UNSAccountInUNSGroup on UNSAccount.UID_UNSAccount = UNSAccountInUNSGroup.UID_UNSAccount where (UNSAccount.UID_UNSRoot = N '***YOUR DOMAIN UID ****' ) and (UNSAccountInUNSGroup.UID_UNSGroup in ( select UID_UNSGroup from UNSGroup where cn = N 'GroupA' )))) and (UID_Person in ( select UID_Person from UNSAccount join UNSAccountInUNSGroup on UNSAccount.UID_UNSAccount = UNSAccountInUNSGroup.UID_UNSAccount where (UNSAccount.UID_UNSRoot = N ' ***YOUR DOMAIN UID **** ' ) and (UNSAccountInUNSGroup.UID_UNSGroup in ( select UID_UNSGroup from UNSGroup where cn = N 'GroupB' ))))

George Cerbone · Answer

Hi Todd, 
 This is not version specific. Will apply to any version. You can find these options in the Manager, under "Create a Dynamic Role. " You will probably find this helpful: http://documents.software.dell.com/identity-manager/6.1.2/identity-management-administration-guide/working-with-dynamic-roles

Endpoint Privilege Management

How To Populate Dynamic Role With AD Group Members