Report to see in which rule a group was used

Question

Hello,

Is it possible to adapt the script so that all groups are output where another group is used as a rule? For example: All members of the group "ABCD" are added to the group "Test". Now we need a report that outputs all groups to which the members of "ABCD" are added. In Adaxes the rule looks like this: Is this possible?

Thx a lot

Answer 1

Hello,

Yes, it is possible. You can use the below script. in the script, the $groupDNString variable references a Directory object picker parameter used to select the group to check membership rules against.

$groupDNString = "%param-Group%"
$groupDN = New-Object "Softerra.Adaxes.LDAP.DN" $groupDNString

try
{
    $groupCriteria = New-AdmCriteria -Type "group" -Expression {membershipType -eq "rule-based"}
    $Context.DirectorySearcher.AddCriteria($groupCriteria)

    $searchResultIterator = $Context.DirectorySearcher.ExecuteSearch()
    while ($Context.MoveNext($searchResultIterator))
    {
        $searchResult = $searchResultIterator.Current
        $group = $Context.BindToObjectBySearchResult($searchResult)

        foreach ($rule in $group.MembershipRules) 
        {
            if ($rule.Type -ne "ADM_BUSINESSUNITMEMBERSHIPTYPE_GROUP")
            {
                continue
            }

            $ruleGroupDNString = $rule.Group.Get("distinguishedName")
            $ruleGroupDN = New-Object "Softerra.Adaxes.LDAP.DN" $ruleGroupDNString

            if ($groupDN -eq $ruleGroupDN)
            {
                $Context.Items.Add($searchResult)
                break
            }
        }
    }
}
finally
{
    if ($searchResultIterator) 
    { 
        $searchResultIterator.Dispose()
    }
}

Comments

Thank you for the script, it seems to work. Now the groups are displayed where the ‘Member of group’ function was used. However, I have another rule which is a query and in the rule the group is also used, but it is not displayed in the report. Is it possible to extend the script so that all groups are displayed in which the specific group was used in a rule, whether as a query or ‘Member of’ or ....?

---

Hello,

Sorry for the confusion, but we are not sure what exactly you mean. How are you using a group as scope for a query membership rule? Please, post here or send us (support@adaxes.com) a screenshot.