Get-QLogonServiceAccount
Determines if the specified account meets the requirements to be used as a service account in Data Governance Edition.
Note:Data Governance Edition consolidates security information across many domains and forests by accessing these network entities using stored credentials (service accounts). These service accounts are Active Directory users granted the appropriate permissions in their respective domains and registered with Data Governance Edition.
Syntax:
Get-QLogonServiceAccount [-UserName] <String> [-Password] <String> [-DomainId] <String> [<CommonParameters>]
Table 132: Parameters
UserName |
Specify the name of the Active Directory account to be checked. |
Password |
Specify the password associated with the account. |
DomainName |
Specify the name of the domain to be checked to determine if the specified account meets the requirements of a service account. |
Examples:
Table 133: Examples
Get-QLogonServiceAccount -UserName Administrator -Password myppassword -DomainName mydomain.dge.dev.phx.com |
Checks the specified account to determine if it meets the requirements to be used as a service account in Data Governance Edition. |
Get-QServiceAccounts
Retrieves a list of service accounts registered with the Data Governance server.
Syntax:
Get-QServiceAccounts [-ServiceAccountId] [<String>]] [<CommonParameters>]
Table 134: Parameters
ServiceAccountId |
(Optional) Specify the ID (GUID format) of the service account to be retrieved.
Run the Get-QManagedDomains cmdlet to retrieve a list of managed domains, including the managed domain and service account IDs. |
Examples:
Table 135: Examples
Get-QServiceAccounts |
Retrieves a list of all registered service accounts. |
Get-QServiceAccounts -ServiceAccountId 3253af66-c104-4472-b770-c8097b2df6d8 |
Retrieves information about the specified service account. |
Details retrieved:
Table 136: Details retrieved
ServiceAccountId |
The value (GUID) assigned to the service account (UID_QAMServiceAccount). |
AccountSid |
The security identifier (SID) assigned to the Active Directory account. |
UserDomainName |
The name of the domain to which the user belongs. |
UserName |
Logon name (pre-Windows 2000) of the Active Directory account (UID_ADSAccount). |
UserPrincipalName |
User principal name (email address) of the service account. |
Description |
The descriptive text entered when the service account was registered with Data Governance Edition. |
IsDefaultObjectResolution |
Indicates whether the account is being used as the Data Governance default account and will be used to connect to Active Directories which do not have explicit service accounts configured. |
StatusDetailMessage |
If applicable, a message about the current state of the data from the agent. |
Status |
The status of the agent. |
CanManageDomains |
Indicates whether the service account is capable of being impersonated on the Management Server it is being called upon.
NOTE: This is set within the ServiceAccounts InternalService on the Data Governance server. It will be true if impersonation is successful; and false, if impersonation fails. |
ServiceAccountName |
The name of the service account. |
Remove-QServiceAccount
Removes a server account from the Data Governance Edition deployment.
Note: Remove any associated managed domains BEFORE removing a service account. Run the Remove-QManagedDomain cmdlet to remove a managed domain from your Data Governance Edition deployment.
Syntax:
Remove-QServiceAccount [-ServiceAccountId] <String> [<CommonParameters>]
Table 137: Parameters
ServiceAccountId |
Specify the ID (GUID format) of the server account to be removed from the list of registered service accounts.
Run the Get-QServiceAccounts cmdlet without any parameters to retrieve a list of registered service accounts, including the assigned service account ID. |
Examples:
Table 138: Examples
Remove-QServiceAccount -ServiceAccountId b0a0e218-55c1-41d7-9585-bf7578ad1130 |
Removes the specified service account from the list of service accounts registered for use by Data Governance Edition. |
Set-QServiceAccountUpdated
Notifies the Data Governance server that the service account was updated and the server should process it.
Syntax:
Set-QServiceAccountUpdated [-ServiceAccountId] <String> [<CommonParameters>]
Table 139: Parameters
ServiceAccountId |
Specify the id of the service account to be updated.
Run the Get-QManagedDomains and Get-QServiceAccounts cmdlets to retrieve a list of available service accounts and their IDs. |
Examples:
Table 140: Examples
Set-QServiceAccountUpdated -ServiceAccountId 18CC36D3-81AE-4856-925B-9B1B1E587381 |
Updates the specified service account. |