Feature request - more approvers

Question

Hello

More approvers would be usefull when adding a member to a group:

+ Manager of the target user.
+ Owner of the target user's OU.

In some cases, a User manager can add a user placed outside the User manager's scope to a group, or a Group manager can add users to his group.
Adding a user to a group may give the target user rights to data, access to IT system, or may issue an invoice. In all cases, the target user's manager must approve membership.

- Regards

Answer 1

Hello,

Actually, that can be done with the help of scripts. Have a look at the following examples we've made for you in the Script Repository:

• Request users to approve adding their managed objects and subordinates to group
• Request users to approve adding AD objects located in OU they manage to group

Comments

Hello

When launcing: $Context.SubmitForApproval(@($ManagerGroup), $False, $False, $False, $False)

Adaxes tells me, that the method is unknown:
"Method invocation failed because [Softerra.Adaxes.Adsi.Scripting.ExecuteConditionScriptContext] doesn't contain a method named 'SubmitForApproval'."

SubmitForApproval does not show up using intellisense either ?

- Thanks

---

Hello,

What version of Adaxes are you using? The possibility to send operations for approval from script was introduced only in Adaxes 2014.1 (build 3.7.10510.0). If you are using an earlier version of Adaxes, you won't be able to use the $Context.SubmitForApproval method.

---

I'm using this version:

Also, I added IMPORT-MODULE Adaxes in top of the script.

- Best regards

---

Hello,

Can you post here or send us (to support[at]adaxes.com) a screenshot of the Business Rule, Scheduled Task or Custom Command that runs the script and also the text of your script?

---

Hello,

The reason for the issue is that you are trying to call the method in a condition. The $Context.SubmitForApproval method can be used only with the Run a program or PowerShell action. To achieve what you want, you can run your script using the Run a program or PowerShell action, and instead of setting $Context.ConditionIsMet to True, you can call the $Context.Cancel method that does exactly the same as the Cancel this operation action.