Chat now with support
Chat mit Support

Identity Manager Data Governance Edition 9.2.1 - IT Shop Resource Access Requests User Guide

One Identity Manager Data Governance Edition IT Shop Resource Access Requests User Guide Resource access requests Share creation requests PowerShell commands

Get-QManagedResourceTypeDomain

Retrieves details about a managed resource type domain object from the Data Governance Edition deployment.

Syntax:

Get-QManagedResourceTypeDomain [-ManagedResourceID [<String>]] [-DomainID [<String>]] [<CommonParameters>]

Table 34: Parameters
Parameter Description
ManagedResourceTypeID

(Optional) Specify the ID (GUID format) of the managed resource type to retrieve.

If no parameters are specified, all objects in the database are returned.

NOTE: If this parameter is included, the DomainID parameter must also be specified; otherwise, all objects are returned.

DomainID

(Optional) Specify the ID (GUID format) of the Active Directory domain to retrieve.

If no parameters are specified, all objects in the database are returned.

NOTE: If this parameter is included, the ManagedResourceTypeID must also be specified; otherwise, all objects are returned.

Examples:
Table 35: Examples
Example Description
Get-QManagedResourceTypeDomain Returns all managed resource type domain objects in the database.
Get-QManagedResourceTypeDomain -ManagedResourceTypeID 7ade8b8d-a400-4fb1-ab82-6d424feeb63e -DomainID 50905871-5379-455d-8b65-c4bd02360bdb Returns the managed resource type domain object defined for the specified resource type and domain.
Details retrieved:
Table 36: Details retrieved
Detail Description (Associated key or property in QAMManagedResourceTypeDomain table)
ManagedResourceTypeID The value (GUID) assigned to the managed resource type (UID_QAMManagedResourceType).
ADSDomainID The value (GUID) assigned to the ADS domain (UID_ADSDomain).
ADSContainerID The value (GUID) assigned to the ADS group container (UID_ADSContainer).
FullControlGroup The value (GUID) assigned to the full control group (UID_FullControlGroup).
FileOperationsServerTagID The value (ID or GUID) assigned to the Server tag (Server Function) that identifies which job servers can fulfill functions involving file operations (UID_FileOperationsServerTag).

Remove-QManagedResourceTypeDomain

Removes a managed resource type domain object from the Data Governance Edition deployment.

Syntax:

Remove-QManagedResourceTypeDomain -ManagedResourceTypeID <String> -DomainID <String> [<CommonParameters>]

Table 37: Parameters
Parameter Description
ManagedResourceTypeID

Specify the ID (GUID format) of the managed resource type associated with the managed resource type domain object to be removed.

Run the Get-QManagedResourceTypeDomain cmdlet without any parameters to retrieve a list of available managed resource types and associated IDs.

DomainID Specify the ID (GUID format) of the Active Directory domain associated with the managed resource type domain object to be removed.
Examples:
Table 38: Examples
Example Description
Remove-QManagedResourceTypeDomain -ManagedResourceID 7ade8b8d-a400-4fb1-ab82-6d424feeb63e -DomainID 50905871-5379-455d-8b65-c4bd02360bdb Removes the specified managed resource type domain object from the Data Governance Edition deployment.

Set-QManagedResourceTypeDomain

Updates the settings for an existing managed resource type domain object in the Data Governance Edition deployment.

Syntax:

Set-QManagedResourceTypeDomain -ManagedResourceTypeID <String> -DomainID <String> [-ContainerID [<String>]] [-FullControlGroupID [<String>]] [-FileOperationsServerTagID [<String>]] [<CommonParameters>]

Table 39: Parameters
Parameter Description
ManagedResourceTypeID

Specify the ID (GUID format) of the managed resource type associated with the managed resource type domain object to be updated.

Run the Get-QManagedResourceTypeDomain cmdlet without any parameters to retrieve a list of available managed group containers and associated IDs.

DomainID

Specify the ID (GUID format) of the Active Directory domain this object applies to.

TIP: The ID can be located in the ADSDomain table in One Identity Manager after Active Directory synchronization is complete (UID_ADSDomain)..

ContainerID

(Optional) Specify this parameter to change the Active Directory container to use for managed group creation for a given Active Directory domain. Enter the ID (GUID format) of the Active Directory container.

TIP: The ID can be located in the ADSContainer table in One Identity Manager after Active Directory synchronization is complete(UID_ADSContainer).

FullControlGroupID

(Optional) Specify this parameter to change the Active Directory group to give full control access. Enter the ID (GUID format) of the Active Directory group.

TIP: Only groups that have been previously synchronized with One Identity Manager are available.

FileOperationsServerTagID

 

(Optional) Specify this parameter to change the Server tag (Server Function) that identifies which job servers can fulfill functions involving file operations. That is, operations involving the creation of folders and shares on managed hosts. Enter the value assigned to the server tag when it was created, which may be an ID, such as QAM-Connector-DGE, for predefined server tags or a GUID for custom server tags.

Examples:
Table 40: Examples
Example Description
Set-QManagedResourceTypeDomain -ManagedResourceTypID 7ade8b8d-a400-4fb1-ab82-6d424feeb63e -DomainID 50905871-5379-455d-8b65-c4bd02360bdb -FullControlGroupID 6a402082-0be9-4815-9910-b69241ce6d6a Updates the full control group associated with the specified managed resource type domain object.

Group template management

A managed group template defines how a hierarchy of Active Directory groups is to be created and nested to support ACLs for managed resources.

TIP: Prior to adding or modifying a managed group template, see The security model.

The following commands are available to manage your group templates, which are used in file system share requests in the IT Shop. For full parameter details and examples, click a command in the table or see the command help, using the Get-Help command.

Table 41: Group template management commands

Use this command

If you want to
Add-QManagedGroupTemplate Add a managed group template to the Data Governance Edition deployment.
Get-QManagedGroupTemplate

Retrieve a managed group template from the Data Governance Edition deployment.

You can retrieve a specific group template or a list of all group templates in the database.

Remove-QManagedGroupTemplate Remove a managed group template from the Data Governance Edition deployment.
Set-QManagedGroupTemplate Update an existing managed group template in the Data Governance Edition deployment.
Verwandte Dokumente

The document was helpful.

Bewertung auswählen

I easily found the information I needed.

Bewertung auswählen