Online Manual: "User Management Resource Adminstrator"
Go to: User Management Resource Administrator homepage
Script Action: Set group membership (AD)
Function
Make an Active Directory object a member of specified Active Directory
universal, domain global or domain local groups. An update of the group
membership will take place. The group membership will be added to the
'Member Of' list of the Active Directory object.
Deployment
This action is typically used in a script that is intended to manage
existing objects in active directory. This action can be used to set group
memberships for every object in your Active directory.
In this action the Active Directory Object is identified by a property
value. You should either provide a data structure provided by an other
action (Property: Active Directory Object) or provide the object distinguished
(Property: Active Directory name). When you want to add the object to
multiple groups, the Group names must be obtained from a multi-text variable
Script Action:
Manage multi-text value variable.
Properties
|
Property Name |
Description |
Typical setting |
Remarks |
|
Active Directory Object |
An Active Directory object for which the group
memberships are updated. |
%ActiveDirectoryObject% |
The value
of this variable should be obtained from an other action. This value can
be obtained from script actions: Create user (AD), Create contact (AD),
Get User (AD) or Get object (AD). You should make sure the export variable
of these actions is the same as the import variable of the property (default:
%ActiveDirectoryObject%) |
|
Active Directory name |
The object distinguished name of the Active
Directory object. |
|
You should use either the Active Directory
Object (%ActiveDirectoryObject%) to identify the object or the Active
Directory name. The active directory name should be specified by the object
distinguished name. Example:cn=Group1,ou=OrgUnit,dc=tools4ever,dc=com |
|
Group names (variable) |
The names of the groups of which the object
becomes a member. |
|
The group names should be specified by there
full LDAP name. You should use a multi-text variable to set this property.Script Action:
Manage multi-text value variable.
The group memberships are updated not reset. The specified object will
remain member of earlier specified groups. |
Related topics
Help on help
Principle of operation
Project operations - Manage script action properties
Script Action: Get object (AD)
| 
