• State Verified Answer
  • Replies 4 replies
  • Subscribers 62 subscribers
  • Views 1510 views
  • Users 0 members are here
Options
Related

Temporary group membership

aguliana
over 2 years ago

HI,  I would like to add a group by midnight through a script, I know the GUI has the setting to set date and time but how would I do it using a script.

Command:

Add-QADgroupmember -identity "groupname" -member $ADuser   (tonight at midnight)

any help would be much appreciated  Slight smile

Parents
  • 0 over 2 years ago in reply to JohnnyQuest

    I had a script open, I had to remove bits (so you'll need to test in your lab environment), but to add to Johnny's link

    $Type = "Add"
$Group = "<GroupDN>"
$Member = "<MemberDN>"
$Reason = "<Reason>"
$SetTime = get-date -Date (Get-date).Date -Hour 00 -Minute 00 -Second 00
$GroupDN =  Get-QADObject -Identity $Group
$MemberDN = Get-QADObject -Identity $Member
   
$ControlHash=@{}
$ControlHash.Add("OperationReason","$Reason")
$ControlHash.Add('ScheduledOperation-SetTime',$($SetTime))

if($Type -eq "Add")
{
	$Add = Add-QADGroupMember -Identity $GroupDN.DN -Member $MemberDN.DN -Control $ControlHash -Proxy
}
ElseIf($Type -eq "Remove")
{
	$Remove = Remove-QADGroupMember -Identity $GroupDN.DN -Member $MemberDN.DN -Control $ControlHash -Proxy
}
Elsehttps://www.oneidentity.com/community/active-roles/f/forum/32839/temporary-group-membership/80088#
{
	Write-Host "Unhandled type ($($Type))"
}

Reply
  • 0 over 2 years ago in reply to JohnnyQuest

    I had a script open, I had to remove bits (so you'll need to test in your lab environment), but to add to Johnny's link

    $Type = "Add"
$Group = "<GroupDN>"
$Member = "<MemberDN>"
$Reason = "<Reason>"
$SetTime = get-date -Date (Get-date).Date -Hour 00 -Minute 00 -Second 00
$GroupDN =  Get-QADObject -Identity $Group
$MemberDN = Get-QADObject -Identity $Member
   
$ControlHash=@{}
$ControlHash.Add("OperationReason","$Reason")
$ControlHash.Add('ScheduledOperation-SetTime',$($SetTime))

if($Type -eq "Add")
{
	$Add = Add-QADGroupMember -Identity $GroupDN.DN -Member $MemberDN.DN -Control $ControlHash -Proxy
}
ElseIf($Type -eq "Remove")
{
	$Remove = Remove-QADGroupMember -Identity $GroupDN.DN -Member $MemberDN.DN -Control $ControlHash -Proxy
}
Elsehttps://www.oneidentity.com/community/active-roles/f/forum/32839/temporary-group-membership/80088#
{
	Write-Host "Unhandled type ($($Type))"
}

Children
No Data