-
Titre
Ability to read object Delegation through powershell -
Description
Is it possible to query below permissions via Powershell?:
-
Résolution
The following script will show trustee and Access Template details linked to a specific User object:
#######################################################################################################################The below script is known to work successfully; however, it has not been officially tested by our Quality Control.
If any of these instructions are changed and/or incorrectly used, intentionally or unintentionally, this solution
becomes unsupported by our Support and Development. Support and Development recommend always making a backup of
the current database prior to execution of any script(s) that may modify it. For customization of the Active Roles
Solution, please contact our Professional Services Organization.#######################################################################################################################Clear-host
Connect-QADService -Service localhost -Proxy | Out-Null
$CurrentUser = "CN=Test User1,OU=_A,DC=Brodieman,DC=Uk"
$List = @()
$Object = Get-QADObject -Type user -Identity $CurrentUser -DontUseDefaultIncludedProperties -IncludedProperties edsaDelegatedPermissions -Proxy
$DelegatedPermissions = $Object.edsaDelegatedPermissions
ForEach($DelegatedPermission in $DelegatedPermissions)
{
$Item = Get-QARSAccessTemplateLink -Identity $DelegatedPermission -DontUseDefaultIncludedProperties -IncludedProperties DirectoryObject,AccessTemplate,Trustee -proxy
if($Item.count -gt 0)
{
$List += $Item
}
}
$List | Select-Object Trustee,DirectoryObject,AccessTemplate | FT