The 'ActiveRoles Server Web Interface' New object / User creation wizard 'Generate Password' button is greyed out for custom object classes such as AD/LDS Objects that are password protected.
The Built-in Script Module 'Generate User Password' does not support non-standard user type objects. When the script is run against a policy, the script will pass over the unique object class and not activate the 'Generate Password' button in the 'ActiveRoles Server Web Interface'.
Open the 'Generate User Password' Script Module located in the 'ActiveRoles Server Management Console' under 'Contiguration | Script Modules | Builtin | 'Generate User Password'
Find the section in the first portion of the script:
' PARAMETERS OF SCRIPT YOU MAY MODIFY
' Set the name to identify the error source when the script generates an error
Const ScriptName = "user - generate password"
Const effectiveClass1 = "user"
Const effectiveClass2 = "inetOrgPerson"
Add a line to the end of this section like this:
Const effectiveClass3 = "CustomClassName"
Be sure to use a consecutive number. Save the script Module and ensure the script has a Scope that includes the location where the custom object classed objects are being created.