For detailed information about new features, see the Active Roles 7.3 What’s New Guide.
Whats new in Active Roles 7.3
This section provides a summary of the new features included in Active Roles Version 7.3. For detailed information about new features, see the Active Roles 7.3 What’s New Guide.
Major new features in Active Roles Version 7.3:
- Support for One Identity Hybrid Subscription
- Support for Hybrid Directory Mailbox Management
Support for Microsoft SQL Server 2017
- Support for connecting to One Identity Starling, the Software as a Service (SaaS) solution of One Identity through Active Roles
Integration of Starling Two-factor Authentication with Active Roles through the Web interface
Support for customizing Microsoft Office 365 license related operations on User provisioning and deprovisioning
Display the number of members in a Group in the Web interface
SPML Extension Enhancement to Modify Shared Mailbox User permissions
Back Sync Improvements
Sync Service enhancements
- Password generation policy enhancement
- Web interface security enhancements
- Enhanced Web interface accessibility for disabled users
Whats new in Active Roles 7.0
The following features are new in Active Roles as of version 7.0
- Web Interface has been redesigned for greater clarity and ease of use, to ensure consistent look and feel, improve user experience, and simplify and streamline management tasks.
- A new component, Synchronization Service, performs data synchronization and replication tasks to enable user, group, or recipient management across various on-premises systems and in the cloud.
- Integrated administration of users and mailboxes in Exchange resource forest environments, with the ability to create and administer mailboxes by managing mailbox users in external forests.
- Integrated administration of Lync Server users in single and multi-forest environments, with the ability to enable, disable or re-enable users for Lync Server and administer Lync Server user properties.
- Various improvements to Active Roles workflow, including new activities to help access and modify workflow data context at run time, new activity options, and workflow scripting capabilities.
- Support for Exchange 2010 remote Shell removes the need to install the Exchange 2010 Management Tools on the computer running the Active Roles Administration Service.
- Active Roles Configuration for Hybrid Environment.
- Azure AD /Office 365 Object Management in Hybrid Environment.
- Microsoft Office 365 License Management.
- Support for Microsoft Windows Server 2016.
- Support for Microsoft SQL Server 2016.
- Support for Microsoft Exchange 2016.
- Support for Microsoft .Net 4.6.2.
- Active Roles facilities a new attribute namely 'OperationInitiatorSid' under the $Request object, which provide the SID of the initiator who requested the operation. This enhances the current Active Roles - Change Auditor integration capability to display the correct initiator information.
- Support for managing Skype for Business through Active Roles.
- Active Roles in-place upgrade enhancements.
- Limited support for Exchange Online.
- Management of Azure AD Contacts.
- Management of Azure AD Distribution groups.
- Enhancements to Azure Active Directory and Office 365 functionality:
- Azure License Reporting.
- Visual indicator for Azure configuration status.
- Granular license customization.
- Support for synchronized identity environments.
- Azure Application permissions enhancements.
- Support for creating users, groups, and contacts in Azure/Office 365 through SPML.
Changes to Setup and Installation
Changes to Setup and Installation
Active Roles 7.3 introduces the following changes to Setup and Installation:
Unified Setup Wizard
Table 1: Changes to Unified Setup wizard
|Numerous MSI files
|The components must be installed in the correct order.
The Active Roles installer, Setup.exe has command-line options for a silent installation. For more details, refer to KB 185799
Setup.exe /quiet /install ADDLOCAL=Service,Console /IAcceptActiveRolesLicenseTerms
The Configuration Center unifies management of core configuration for the Active Roles Administration Service and Web Interface, which allows administrators to perform the core configuration tasks from a single location.
- Initial configuration tasks such as creation of Administration Service instances and default Web Interface sites.
- Import of configuration and management history from earlier Active Roles versions.
- Management of core Administration Service settings, such as the Active Roles Admin account, service account, and database connection.
- Creation of Web Interface sites based on site configuration objects of the current Active Roles version or site configuration objects imported from earlier Active Roles versions.
- Management of core Web Interface site settings, such as the site’s address on the Web server and configuration object on the Administration Service.
- Scriptable Configuration Center operations using Windows PowerShell command-line tools provided by the Active Roles Management Shell.
The following two methods are available for configuring the Active Roles instance:
- Graphical User Interface (Active Roles Configuration Center)
- PowerShell (Active Roles Management Shell)
Management Shell Integration
The Active Roles Management Shell, which provides Windows PowerShell based command-line tools (cmdlets) for executing and automating administrative tasks in Active Roles, is a part of the Management Tools component included in the Active Roles Setup.
- Provides cmdlets for managing users, group, computers, and other objects in Active Directory via Active Roles; managing digital certificates; and administering certain Active Roles objects.
- Cmdlets are prefixed with QAD or QARS, such as New-QADUser, Add-QADCertificate, or New-QARSAccessTemplateLink.
- Provides cmdlets for configuring Active Roles Administration Service instances and Web Interface sites.
- Available on 64-bit (x64) systems only. It requires the Active Roles Administration Service or Web Interface to be installed; otherwise, the module does not provide all cmdlets.
- The cmdlets provided in this module have their noun prefixed with AR, such as New-ARDatabase, New-ARService, or New-ARWebSite.