build approver list via powershell from group and remove initiator

Question

This may sound a little convoluted, but I will try and explain.

I'd like to have an operation require approval by a group. And if the initiator is a member of that group, I don't want the request to be automatically approved. We want a peer to approve - someone in the same team. And right now, the request is automatically approved because the initator is in the group of approvers.

I've seen questions and answers about building a list of requestors via powershell, but I am missing something.

I need to retrieve the members of the approver group (which will be DNs) and then I need to search the members of the approver group looking for the DN of the initator and remove it.

Then the request for approval can be submitted.

So, I've got the workflow ... but I am getting stuck on retrieving the Initator's DN.

My apologies if this is a simple request. I ran a big deployment of adaxes several years ago and I am just now (like right now) getting back into it at a new company. I've got to dust off some of the brain cells.

Thanks.

Answer 1

Hello,

You can use value reference %adm-InitiatorDN%. It will resolve into the distinguished name of the account who initiated the core operation. Make sure to wrap it into double quotes in your script.