Leveraging Adaxes to perform entitlement reviews

Question

Hey Everyone,

Just putting a "feeler" out there to see if anyone has had any luck with leveraging Adaxes in any way to perform entitlement reviews on active directory groups.

One option would be to email one of the group membership web reports, but it doesn't sound like I can set those up as a scheduled task. I also took a good look through the script repository and didn't see this topic hit.

Anyone have some good experience in this...or have a nifty powershell script to share on how to accomplish this?

I would just need to have powershell (or whatever) get the group membership of a group, and email that to a group of users. Sounds simple enough, but I am struggling with it.

Thanks,

Comments

Just giving this post a bump...

Is anyone out there using adaxes to help conduct entitlement/access campaigns? An example would be gather a list of members on your Domain Administrator group, and email off for approval. How are you doing this today?

Thanks!

---

Did you ever find a way to send a list of members of a group to the owner for entilement review?

---

Hello,

As of now, you can schedule report delivery: https://www.adaxes.com/help/ScheduleReports. You can use a built-in report, Members of my managed groups. By default, the report is located in container Reports\All Reports\Groups\Membership. However, it will just be a list of members. There is no way to manage members via the report. The only option that might be a solution is re-adding all members to the groups within an approval workflow. However, there will be a separate approval per user, not a single one.

Answer 1

Hello Ben,

The following script from our Script Repository seems to be something that can help you out in this situation: http://www.adaxes.com/script-repository ... n-s182.htm. Also, you can use the following script that will allow you to determine which users were added or removed from AD groups within a certain time period: http://www.adaxes.com/script-repository ... s-s289.htm. Both the scripts can be scheduled with the help of Adaxes Scheduled Tasks, if necessary.

Is it something that meets your needs?