• State Not Answered
  • Replies 5 replies
  • Subscribers 62 subscribers
  • Views 2006 views
  • Users 0 members are here
Options
Related

Access Template Links / Delegated Rights in Powershell

ScotJay
over 2 years ago

Hey!

In the GUI, I can right click on an object (say a user account) and then click 'Delegated Rights', ARS presents me with a pretty neat interface showing delegated AT's for the entire directory. However, this gridview is not exportable. I've been trying to do the same in powershell, using Get-QARSAccessTemplateLinks - Trustee <username>, however this returns nothing.

I did a search on the forum, and came across this script  Access Template Link Reporting
But again, when I run this, I get nothing back for the trustee.

Am I doing something wrong, or can you point me to the correct command to get the same list as the from the GUI?

Many thanks Slight smile

J

Parents Reply Children
  • 0 over 2 years ago in reply to JohnnyQuest 

    $Trustee = "Your Trustee"

$TrusteeObject = Get-QADObject -LdapFilter "(cn=$Trustee)" -Proxy

If($TrusteeObject)
{
    $ATs = Get-QARSAccessTemplateLink -Trustee $TrusteeObject -Proxy -SizeLimit 0

    If($ATs)
    {
        $Result = $ATs | Select-object Name,AccessTemplateDN,DirectoryObject,Trustee,AppliedTo
        $Result | Out-GridView
    }
    Else
    {
        Write-Host "No ATs returned"
    }
}
Else
{
    Write-Host "Trustee not found"
}