One Identity Manager Data Governance Edition 7.0.0.1621 Cumulative Hotfix (193638)

New and enhanced Windows PowerShell® commands for retrieving trustee and Active Directory account information. For full parameter details, see the command help, using the Get-Help command.

• Get-QHostsForTrustee
  This cmdlet was expanded to include the following optional parameter:
  • -IncludeIndirectAccess: Include indirect access in the results. If not specified, the results include the managed hosts where the specified account has direct access.
• Get-QADAccount
  New cmdlet that retrieves Active Directory objects from One Identity Manager and QAM tables: ADSAccount, ADSGroup, ADSOtherSID, QAMLocalUser, and QAMLocalGroup.
  The results can be filtered with optional parameters:
  • Name: The object name.
  • Domain: The object domain.
• Get-QAllTrustees
  New cmdlet that retrieves all of the entries from the QAMTrustee table.
  The results can be filtered with optional parameters:
  • TrusteeName: The name of the trustee to be searched.
  • Domain: The domain of the trustee to be searched.
• Get-QIndexedTrustees
  New cmdlet that retrieves all of the entries from the QAMTrustee table who are also listed within the QAMSecurityIndex table, denoting an indexed trustee.
  The results can be filtered with optional parameters:
  • TrusteeName: The name of the trustee to be searched.
  • Domain: The domain of the trustee to be searched.
• Get-QAccountAccess
  This cmdlet was expanded to include additional SharePoint resource types.
  Valid resource types now include: Files, Folders, Shares, LocalOSRights,AdminRights, ServiceIdentities, SharePointResources, SharePointFarmAdminRights, SharePointWebAppPolicies, and SharePointSiteCollectionAdminRights.
• Get-QAccountAccessOnHosts
  For a given account (Domain\SAMAccountName), this new cmdlet retrieves the account’s resource access across all available hosts. The data retrieved is in the form of:
  • RightType: The access right type.
  • ItemResourceType: The resource type.
  • ResourceURI: The URI of the resource to which the trustee has access.
  • TrusteeDisplayName: The display name of the trustee.
  • TrusteeSid: The SID of the trustee.
  • HostName: The host where the resource resides.
  • Rights: The specific access rights assigned.
  • AppliesTo: What the rights apply to.
  • Inheritance: The inheritance type.
  
  
  There are several parameters for the Get-QAccountAccessOnHosts cmdlet:
  • -AccountName: (Mandatory) The account name to perform the access report on.
  • -AccountDomain: (Mandatory) The account domain to perform the access report on.
  • -ManagedHostList: (Optional) Limits the results to the specified managed hosts. If not specified, all managed hosts are included.
  • -ResourceTypes: (Optional) Limits the results to the specified resource types: Files, Folders, Shares, LocalOSRights, AdminRights, SharePoint, SharePointResourceItems, SharePointFarmAdminRights, SharePointWebAppPolicies, and SharePointSiteCollectionAdminRights.
    If not specified, all resource types are included.
  • -UriFilterPattern: (Optional) Limits the results to resources whose URI contain the given string.
  • -DirectOnly: (Optional) Switch parameter to exclude indirect access to a resource from the results.
  • -OutputDirectory: (Optional) An absolute path to a directory where the results are to be saved. If the directory does not exist, it will be created.
  • -VerboseLogging: (Optional) Switch parameter to turn on verbose logging.