• Possible to run Powershell script in workflow with user rights, not AR service account rights?

    Is it possible to run a PS script module in a workflow but have it run as the user who started the workflow, not the AR service account?  

    In the "run-as" setting for the workflow,  we have it set to run as the user, not the AR service account…

  • get-qaduser stop on error

    When using 'get-qaduser samaccountname' if the samaccount name is not valid,  no error is thrown it just does not return anything

    Is there a way to make it return an error if the samaccountname is not valid?

  • is any Configuration transfer Wizard documentation available apart from administrative guide pdf

    hello,

    if anyone has worked or experience on Configuration transfer Wizard  ,can provide the related links ,suggestion and guidelines .

    It would be great before build migration planning of ARS objects.

    Thanks
    Richa

  • how to export the ARS objects in .arxml format so it imported in same file format.

    Hello,

    I tried to export some of object from Active role console .It is exported in txt file as option available in ARS,When Tried to import ,it will take .arxml format.

    How to export and import in same format .

    Thanks

    Richa

  • best practices for using Configuration Transfer Wizard to migrate in new environment

    Hello,

    What are the best practices or steps to follow while using the Configuration Transfer Wizard and the Deployment Wizard?

    like what object should be moved first and what can be done in case of failure in the deployment phase..

    please share KB and related…

  • how to get Active Role software setup

    Hello,

    How I can get the Active Role server setups like other quest software are available for download.

    thanks
    Richa

  • Approvals are getting skipped all of a sudden

    We have several workflows setup that have approval steps in them.   A tech adds a user to a certain group, they get a pop up for justification, that gets emailed to manager and then they approve or reject the request.  This has worked great for over a year…

  • Workflow and get attributes than the changed attribute

    Hello, 

    I have this script in a workflow where the trigger is changed attribute extensionattribute1 OR physicaldeliveryoffice. Thing is that When one of these attributes change, the worklow is launche but  the script only can get the changed attributte…

  • setting MFA during account creation

    Hi,

    Another custom script query following the one I had the other week.  We've got a script that switches on MFA to have SMS as the default but doesn't set a number.  We do this as a measure to prevent people who haven't had MFA set up having their…

  • how to migrate old environment to new environment

    Hello Experts,

    We have an old environment where below product is installled.

    Active Roles
    Change Auditor for Active Directory

    GPOADmin

    Recovery Manager for Active Directory

    Recovery Manager for Active Directory Disaster Recovery Edition

    IMA

    What is…

  • Findout dynamic group configuration

    Hi Guys,

    I need to extract a the configuration (query) of a group distribution group / security group.

    Can anyone help me to findout?

  • How to check if an account is licenced after backsync following update to 8.1.3

    Hi,

    I've recently updated to 8.1.3 and I'm having trouble with one of the custom scripts since it uses a newer version of powershell.  We have a hybrid setup and when we create users we aren't creating a mailbox.  Instead Exchange online is…

  • Need to get Deprovision Report sent to user who initiated the action or else be able to get record of changes made

    The Deprovision User has the ability to email a report to a user specified in the Policy.  I like the report that is generated and would like to be able to have it sent to the person initiating the deprovision so that they can attach it to the service…

  • Which permission triggers visibility of "Exchange Properties"

    Hello,

    because of a certain delegation I would need to make "Exchange Properties" visible to some user in ActiveRoles.

    However, I haven't found out which permission is actually triggering this visibility. In The Web Form it just says that it…

  • How to Rename 'Other Properties' Tab in Active Roles Console?

    Hello,

    I've made modifications to the properties window within the Active Roles Console and added a new tab named "other properties." Does anyone know how to rename this tab?

    For reference, I've been using this Knowledge Base article:…

  • Unable to modify attribute in onPostCreate

    Hello,

    I am trying to modify the attribute ""edsvaSendAsTrustees" in $DirObj in the function onPostCreate. My PowerShell function that is called in the onPostCreate looks like this:

    #===================================================…
  • Is it possible to customize the Group Members and Add Members page to show additional columns as default view for all users?

    We would like to customize the Members page of the Group Management site to display an extra column or two, but it doesn't have a Customize button. Is it possible to customize that page and set a default view for all users?

    We would also like to do…

  • Can't Access Saved Object Properties from Script / Counter Returns Empty

    Hi,

    We're trying to create a workflow that counts every time a user enables or disables another user every day (workflow trigger is the modifivation of edsaAccountIsDisabled). (the counter resets every day.) If the counter reaches 20, the action requires…

  • Copy groups a domain user A belong to to another domain user in the same domain, with a selection of the groups to copy

    Hi Experts,

    Completely new to ARS / ARSWeb, I would need some details about the task I've been assigned to:

    - ARS : version 7.5

    In One Identity Active Roles Web 7.50, how can I create a form to allow an admin user to copy groups with a selection…

  • Password Generation: Limiting Users By Group Membership

    Hi,

    We applied a custom passwrod generation policy, and we want to force members of certain groups to reset passwords by generation (uneditable).

    For example, when "strongUser1" (member of Domain Admins) tries to reset "jdoe"'s password, they should…

  • retrieve PowerShell command in web interface

    I have script in workflow to check LAPS password from ms-Mcs-AdmPwd and send it to initiator mail,
    The workflow in WI task. it's possible to retrieve the password to Web Interface and not to mail?

  • Failed to add Managed Domain

    Hello,

    I tried to add management Domain in Active Roles version 8.1 and I got this error -  " The specified domain either does not exist or could not be contacted"
    I tried everything from KB without success

    Description of the problem -

    1. one…

  • Domain sync with groups to a sub domain and users as member of the root domain

    Hello Experts,

    Anyone happen to have handled a domain groups sync in a situation where the groups and users are in the same forest but the groups need to be created in the sub domain but the users are in the root domain.

    • (Source)
      • Acquired Domain (Acquired…
  • Use workflow script to modify Azure attribute of removed member (disabling)

    Good morning

    I am a beginner in ARS Workflows....

    I have a use case where an account which is synched from AD on-Premise to Azure is disabled on premise and must be immediately disabled on Azure without waiting for next the AAD synch run.

    i know how to…

  • Backlink attributes

    Is it possible to create a virtual attribute on one class of objects and tie it to another class via a backlink attribute?

    Similar to Members in groups and Memberof in Users, how can I create a banklink that works like this?

    I haven't found any references…