This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

What are the required permissions to read Access Template Links when using PowerShell?

Hello Forum,

I'm getting the following error when trying to read the Access Template links using Quest cmdlets:

[PS] C:\Users\svc_activeroles>Get-QARSAccessTemplateLink -DirectoryObject 'myDomain/myOU' -proxy
Get-QARSAccessTemplateLink : Access is denied.
At line:1 char:1
+ Get-QARSAccessTemplateLink -DirectoryObject 'myDomain/myOU' -proxy
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: (:) [Get-QARSAccessTemplateLink], UnauthorizedAccessException
+ FullyQualifiedErrorId : System.UnauthorizedAccessException,Quest.ActiveRoles.ArsPowerShellSnapIn.Powershell.Cmdl

I am able to see the link in the ARS MMC console when I click the same OU above. I can also see the Access Templates under the Configuration container.

What could be missing?

I am not an ARS admin, my account contains restricted access to ARS and Active Directory.

Thanks!

Dalton.

0 JohnnyQuest over 7 years ago

The links are actually stored here:

CN=AT Links,CN=Configuration

...as a non-ARS admin, you may not be able to see into that.
Cancel
Up 0 Down

Cancel
0 Dalton Kole over 7 years ago

Ah, that explains then.
Can I be given explicit permissions at that CN?
Cancel
Up 0 Down

Cancel
0 JohnnyQuest over 7 years ago

Yes. You need to be able to browse to it through the ActiveRoles Configuration container. Your ARS Admins should be able to do this.
Cancel
Up 0 Down

Cancel