Return
-
Title
How to: Create virtual attributes -
Description
Active Roles provides the facility to define custom (virtual) attributes for any existing object type. This allows additional object properties to be specified without extending the Active Directory schema. For example, custom attributes can be used to store specific user data. Active Roles virtual attributes are not available in the Active Directory schema. -
Resolution
It is possible to configure a virtual attribute to store the attribute value in the Active Roles database. Otherwise, to use the virtual attribute a script policy is required in order to handle the attribute value.To create a virtual attribute:- In the console tree, expand Configuration | Server Configuration.
- Under Server Configuration, right-click Virtual Attributes and select New | Virtual Attribute.
- Follow the instructions in the Add Virtual Attribute wizard.
- In the Common-Name and the LDAP Display Name boxes, type a common name and an LDAP display name for the new attribute.
In the Unique X.500 object ID box, you can optionally change the default value of the attributeID property (OID) for the new attribute. The default value is generated automatically. If you want to generate your own value, you can use the Oidgen (oidgen.exe) tool, included with the Windows Server Resource Kit.
In the Schema ID GUID box you can optionally change the default value of the schemaIDGUID property. The default value is generated automatically. If you want the new attribute to have the fixed schemaIDGUID property, replace the default value with your own value. For example, you can generate GUID with the Uuidgen tool, included with the Microsoft Platform SDK. - Optionally, in the Description box, type a description for the new virtual attribute. Click Next.
- In the Syntax list, click the syntax you want for the new virtual attribute. If you want the new attribute to be multi-valued, select the Multi-valued check box. Click Next.
Note: Depending on the Syntax you select, the attribute will be displayed differently in the Web Interface and Console. For example, a Boolean type will display as a checkbox, whereas a Date-Time type will display as a calendar control. - Select the check boxes next to the object classes with which you want the virtual attribute to be associated. Click Next.
If you need the new attribute to be associated with object classes that are not listed by default, select the Show all possible classes check box. - If you want to store the values of the attribute in the Active Roles database, select the check box on the Attribute Storage page.
If you choose not to store the attribute values in the database, a script policy is required to supply the attribute value when retrieving the attribute and to save the attribute value when updating the attribute. However, you should use this option carefully. Storing attribute values in the Active Roles configuration database may considerably increase the database size. This option can be modified after the attribute is created, by managing properties of the virtual attribute. - Click Next, and then click Finish to complete the wizard.
After the new virtual attribute has been added, reconnect to the Administration Service. The new virtual attribute appears in the Virtual Attributes container under Configuration | Server Configuration.