Business rule not applied?

Question

I have business rule that is NOT applied to group license_AAD_PREMIUM_P2_internal group even it should according activity scope. Scope for this group was added through PowerShell code mentioned here https://adaxes.com/sdk/DefiningScopeOfActivity/#example-4-include-a-specific-group-object-not-members-of-the-group

What can be the cause of this?

Code looks like this

PS: I encountered same behaviour for security roles (also modified by PS script)

Comments

Hello,

For troubleshooting purposes, please, do the following:

• Specify the triggering operation of the business rule (e.g. After updating a group).
• Provide the script you are using in TXT format.
• Specify all the parameter values you use to execute the script.

---

trigger can be anything (if I add scope bind to the same group manually, rule gets triggered)

script + parameters:

$ruleADSPath = '<ADSPathOfTheAdaxesRule>'
$baseObjectDN = '<DNofTheADObject>'
$type = 'ADM_SCOPEBASEOBJECTTYPE_GROUP'
$exclude = $false
$inheritance = 'ADS_SCOPE_BASE'

$null = [Reflection.Assembly]::LoadWithPartialName("Softerra.Adaxes.Adsi")

# connect to the Adaxes service
$adaxesService = "localhost"
$admNS = New-Object "Softerra.Adaxes.Adsi.AdmNamespace"
$admService = $admNS.GetServiceDirectly($adaxesService)

# get base object
$baseObj = $admService.OpenObject("Adaxes://$baseObjectDN", $null, $null, 0)

# get business rule
$rule = $admService.OpenObject($ruleADSPath, $null, $null, 0)

# add new scope to the business rule
$scopeItem = $rule.ActivityScopeItems.Create()
$scopeItem.BaseObject = $baseObj
$scopeItem.Type = $type
$scopeItem.Inheritance = $inheritance
$scopeItem.Exclude = $exclude
$scopeItem.SetInfo()
$rule.ActivityScopeItems.Add($scopeItem)
$rule.SetInfo()

I am guessing that problem is in the "save" action, but I've tried setOption() too without any luck.

Answer 1

Hello,

Thank you for the provided details. The issue occurs because the $type variable is set incorrectly. As it is specified in the example you referenced, the variable must be set to ADM_SCOPEBASEOBJECTTYPE_CONTAINER. Changing the variable value will remedy the issue.

Comments

You are right. Usage of ADM_SCOPEBASEOBJECTTYPE_CONTAINER indeed solved the problem.

Can you clarify why? Or maybe when should I use ADM_SCOPEBASEOBJECTTYPE_GROUP type?

From official documentation it is not very clear (at least for me)

---

Hello,

Or maybe when should I use ADM_SCOPEBASEOBJECTTYPE_GROUP type?

Whenever you need to add an item as this object only, the ADM_SCOPEBASEOBJECTTYPE_CONTAINER type should be used. The ADM_SCOPEBASEOBJECTTYPE_GROUP one should only be used when it is about group members.

From official documentation it is not very clear (at least for me)

Thank you for pointing this out. We will consider updating the documentation accordingly.

---

aka

if ADS_SCOPE_ONELEVEL or ADS_SCOPE_SUBTREE use ADM_SCOPEBASEOBJECTTYPE_GROUP

if ADS_SCOPE_BASE use ADM_SCOPEBASEOBJECTTYPE_CONTAINER

is that correct?