Adaxes

How can I restrict users automatically based on an AD attribute?

0 votes

This is for license purposes and we do not want them visible in the Adaxes portal.

by (20 points)
0

Hello,

Is it an AD attribute being used or an Adaxes custom one? Should all users with the attribute filled be added to the unmanaged list or only those with the attribute set to a specific value?

Any additional details and live examples of the desired behavior will be much appreciated.

by (287k points)
0

It is an AD attribute, and all users with the attribute set to a specific value should be added to the unmanaged list. For example, all users with the serviceUser attribue set to Yes should be unmanaged.

by (20 points)

1 Answer

0 votes
by (287k points)

Hello,

Thank you for specifying. Have a look at the following script from our repository: https://www.adaxes.com/script-repository/add-users-to-unmanaged-list-based-on-ldap-filter-s645.htm.

Related questions

0 votes
1 answer
Auto-Add/Remove to a Security Group Based on an AD Attribute

Is it possible to script having users added (or removed) from a Security Group based on another AD Attribute? I have found ways to do this in Powershell (something like): ... just utilize the PS script and just run it through Adaxes on a timed fashion? Thanks!

asked Oct 7, 2014 by PunkinDonuts (360 points)
0 votes
1 answer
How can I implement a model to support role-based provisioning operations using AD groups as roles?

I am trying to see if I can implement this in Adaxes somehow to support role-based provisioning to external apps (using appropriate Powershell scripts) but struggling to work ... to invest in a full-blown role-based provisioning platform (would rather not!).

asked Dec 24, 2019 by Bernie (310 points)
0 votes
1 answer
How do I prevent a change based on an existing value?

Hi: I am trying to create a business rule that will stop a value change based on the existing value. For example, if the telephonenumber is 1234 for a group and has to ... the value it uses is the incoming value of the change, not the existing value. Thanks!

asked Jun 3, 2022 by crobitaille (80 points)
0 votes
1 answer
How can I update the target object user's Custom Attribute fields with this Manager user name?

Thanks for the info. I'm now grabbing the %adm-ManagerUserName% value, but need to remove the final 21 characters of it so it contains only their username and not our ... this in the PowerShell Script Editor for my business rule, I get the following error:

asked Mar 11, 2021 by mkvidera (60 points)
0 votes
1 answer
How can I lock down the self service portal? Users can't edit AD attributes.

I am basically setting up the self service portal to only allow a user to reset thier own passwords.

asked Oct 19, 2022 by mightycabal (1.0k points)
3,526 questions
3,217 answers
8,197 comments
547,625 users