Layer7 Identity Management

Expand all | Collapse all

etautil for update account template in AD

Jump to Best Answer
  • 1.  etautil for update account template in AD

    Posted 08-09-2016 03:14 PM

    Hi Guys,

    I need to change 6500 accounts templates in Identity Manager for Active Directory in identit and I would not like to change 1 by 1. Do you know way to do this?



  • 2.  Re: etautil for update account template in AD
    Best Answer

     
    Posted 08-10-2016 02:44 AM

    Hi,

     

    Following are few useful commands for Account Template object. You need to modify a bit as per your requirement:

     

     

    1) Creation of AT as a copy of existing one (first – template, second – new one):

    copy 'eTADSPolicyContainerName=Active Directory Policies,eTNamespaceName=CommonObjects' eTADSPolicy eTADSPolicyName='AD_AT_Template' to eTADSPolicyName='TEST7_AD_AT';

     

    2) Attach endpoint to AT:

    add 'eTADSPolicyContainerName=Active Directory Policies,eTNamespaceName=CommonObjects' eTADSPolicy eTADSPolicyName='TEST10_AD_AT' in 'eTNamespaceName=ActiveDirectory,dc=im' eTADSDirectory eTADSDirectoryName='telma02-i105892.testca.com';

     

    3) Attach group with AT:

    update 'eTADSPolicyContainerName=Active Directory Policies,eTNamespaceName=CommonObjects' eTADSPolicy eTADSPolicyName='TEST11_AD_AT' to +eTADSmemberOf='CN=Performance Log Users,CN=Builtin,DC=testca,DC=com';

     

    4) Remove group from AT:

    update 'eTADSPolicyContainerName=Active Directory Policies,eTNamespaceName=CommonObjects' eTADSPolicy eTADSPolicyName='TEST11_AD_AT' to -eTADSmemberOf='CN=Performance Log Users,CN=Builtin,DC=testca,DC=com';

     

     

    5) Attach AT with Provisioning Role:

    add 'eTADSPolicyContainerName=Active Directory Policies,eTNamespaceName=CommonObjects' eTADSPolicy eTADSPolicyName='TEST10_AD_AT' in 'eTRoleContainerName=Roles,eTNamespaceName=CommonObjects,dc=im' eTRole eTRoleName='TEST8_AD_PR';

     

     

     

    Thank you,

     

    Best regards,

    Sumeet



  • 3.  Re: etautil for update account template in AD

    Posted 08-10-2016 11:06 AM

    Summet,

     

         Tks for your support.

     

    Have a nice day!

     

     



  • 4.  Re: etautil for update account template in AD

     
    Posted 12-06-2018 12:43 PM

    Is there a etautil command to "replace" the AT contained within a Role?