Using the provided PowerShell cmdlet, an administrator can automatically create Questions and Answers (Q&A) profiles for Password Manager users.
The zip archive contains a number of DLLs. The QPM.Service.Modules.PowerShell.dll provides the cmdlet that performs bulk creation of Q&A profiles.
To create Q&A profiles using the cmdlet, prepare a data input file for the cmdlet. The cmdlet can process two file formats: a plain text file and a CSV file.
Run the cmdlet on the server where Password Manager Service (QPM Service) runs.
Note, after you download the archive with the DLLs and extract the archive contents, unblock the QPM.Service.Modules.PowerShell.dll file. To do this, right-click the QPM.Service.Modules.PowerShell.dll file, on the General tab in the Security area click the Unblock button and then click Apply.
Windows PowerShell 3.0 or later must be installed to run the cmdlet.
The text file must be a UTF-8 file (without BOM). The file consists of key-value pairs. A key must be separated from its value by a number of spaces or tab characters. You can use the following keys:
The sAMAccountName key identifies a section about a new user. You should write the keys in the following order:
If several identical sAMAccountName keys exist, the cmdlet will merge information specified for this user. If different answers are specified for the same question, the latest specified answer will be used.
Example of a text file:
sAMAccountName test_user
Domain mydomain
UserName admin
Password 123456
LID en-US
Category Mandatory
Question What is your mother’s maiden name?
Answer Smith
Category Mandatory
Question What was the make and model of your first car?
Answer Volkswagen Golf
Category Optional
Question In what city were you born?
Answer Springfield
Category Userdefined
Question What is your favorite color?
Answer Green
sAMAccountName test_user_2
Domain mydomain
…
The CSV file must be a UTF-8 file (without BOM), with list separator as a delimiter. The first row must contain column headers. You can use the following columns:
The sAMAccountName value identifies a section about a new user. You should write the columns in the following order:
If several identical sAMAccountName values exist, the cmdlet will merge information specified for this user. If different answers are specified for the same question, the latest specified answer will be used.
Example of a CSV file (semicolon as a list separator):
sAMAccountName;Domain;LID;Category;Question;Answer
test_user;mydomain;en-US;Mandatory;What is your mother’s maiden name?;Smith
test_user;mydomain;en-US;Mandatory;What was the make and model of your first car?;Volkswagen Golf
test_user;mydomain;en-US;Optional;What city were you born in?;Springfield
test_user;mydomain;en-US;Userdefined;What is your favorite color?;Green
test_user;mydomain;en-US;Helpdesk;What is your pet's name?;Tom
test_user_2;mydomain;en-US;Mandatory;What is your mother’s maiden name?;Black
test_user_2;mydomain;en-US;Mandatory;What was the make and model of your first car?;Seat Leon
test_user_2;mydomain;en-US;Optional;What city were you born in?;London
test_user_2;mydomain;en-US;Userdefined;What is your favorite color?;Blue
test_user_2;mydomain;en-US;Helpdesk;What is your pet's name?;Dingo
If you use a text file as a data input file, it is recommended to create Management Policies and configure user scopes before running the cmdlet.
If you use a CSV file as a data input file, it is required to create Management Policies and configure user scopes before running the cmdlet.
To run the cmdlet
Import-Module –Name "%PATH_TO_QPM.Service.Modules.PowerShell.dll%"
You can use the parameters ProfilesFilePath, Verbose, HashAnswers, and CsvSeparator when running the cmdlet.
ProfilesFilePath parameter specifies the path to the file with Q&A profile data.
Verbose parameter specifies whether the cmdlet will be run in the verbose mode.
HashAnswers parameter specifies whether user answers will be hashed.
CsvSeparator parameter specifies the list separator to be used. If this parameter is not specified, the default list separator will be used. It is recommended to use this parameter when running the cmdlet.
For example:
PS > Set-Profiles -ProfilesFilePath ".\Desktop\input.csv" -HashAnswers $false -CsvSeparator ';' –Verbose
Below are several best practices for running this cmdlet:
© 2021 One Identity LLC. ALL RIGHTS RESERVED. Feedback Terms of Use Privacy