Chat now with support

Get Live Help
Complete Registration

Sign In

Request Pricing

Contact Sales

Active Roles 8.2 - Console User Guide

Table of Contents

Introduction Getting started

Starting the Active Roles Console Sorting and filtering lists Finding directory objects

Searching for a user, contact, or group Searching for a computer Searching for an Organizational Unit Displaying members of a Managed Unit Using advanced search options Building a custom search LDAP Syntax

Search filter format Operators Wildcards Special characters

Getting policy-related information

User or service account management

Creating a user account Finding a user account Copying a user account Modifying user account properties Renaming a user account Blocking and unblocking a user account Resetting a user password Adding a user account to a group Removing a user account from a group Changing the primary group of a user Performing Exchange tasks on a user account Moving a user account Exporting and importing user accounts Deleting a user account Deprovisioning a user account Restoring a deprovisioned user account Managing user certificates Management of group Management Service Accounts

gMSA management tasks

Creating a gMSA Managing the properties of a gMSA Searching for gMSA in the directory Disabling and enabling a gMSA

Group management

Creating a group Finding a group Copying a group Modifying group properties Changing group type and group scope Renaming a group Assigning a manager to a group Adding members to a group Removing members from a group Performing Exchange tasks on a group Moving a group Exporting and importing groups Deleting a group Deprovisioning a group Restoring a deprovisioned group Administering a query-based distribution group Administering dynamic (rule-based) groups Using temporal group memberships

Adding temporal members Viewing temporal members Rescheduling temporal group memberships Removing temporal members

Computer account management

Creating a computer account Finding a computer account Modifying computer account properties Blocking and unblocking a computer account Resetting a computer account Adding a computer account to a group Removing a computer account from a group Moving a computer account Exporting and importing a computer account Deleting a computer account Managing a remote computer Using a remote desktop connection Viewing BitLocker recovery passwords

Organizational Unit management

Creating an Organizational Unit Finding an Organizational Unit Modifying Organizational Unit properties Renaming an Organizational Unit Moving an Organizational Unit Deleting an Organizational Unit

Contact management

Creating a contact Finding a contact Modifying contact properties Renaming a contact Adding a contact to a group Removing a contact from a group Performing Exchange tasks on a contact Moving a contact Exporting and importing a contact Deleting a contact

Exchange recipient management

Creating an Exchange mailbox

Creating a user mailbox Creating a room or equipment mailbox Creating a linked mailbox Creating a shared mailbox

Managing Exchange-related properties

Exchange General tab Exchange Advanced tab E-mail Addresses tab Mail Flow Settings tab Mailbox Settings tab Mailbox Features tab Calendar Settings tab Resource Information tab

Resource Policy Resource Information Resource in-policy request Resource out-of-policy request

Master Account tab Mailbox Sharing tab

Managing Unified Messaging users

Enabling a user for Unified Messaging Viewing or changing the properties of a Unified Messaging-enabled user Resetting the Unified Messaging PIN for a UM-enabled user Disabling Unified Messaging for a user

Search filter format

Getting started > Finding directory objects > LDAP Syntax > Search filter format

Search filters use one of the following formats:

<filter>=(<attribute><operator><value>)
(<operator><filter1><filter2>)

In this example, <attribute> stands for the LDAP display name of the attribute by which you want to search.

Operators

Getting started > Finding directory objects > LDAP Syntax > Operators

The following table lists some frequently used search filter operators.

Table 2: Operators
Logical Operator	Description
=	Equal to
~=	Approximately equal to
<=	Lexicographically less than or equal to
>=	Lexicographically greater than or equal to
&	AND
\|	OR
!	NOT

Wildcards

Getting started > Finding directory objects > LDAP Syntax > Wildcards

You can add wildcards and conditions to a search filter. The following examples show substrings that can be used to search the directory.

Substring	Description
(objectClass=*)	Get all entries
(cn=bob)	Get entries containing bob somewhere in the common name
(cn>='bob')	Get entries with a common name greater than or equal to bob
(&(objectClass=user)(mail=*))	Get all users with an email attribute
(&(sn=smith)(objectClass=user)(mail=*))	Get all user entries with an email attribute and a surname equal to smith
(&(objectClass=user) \| (cn=andy*)(cn=steve)(cn=margaret))	Get all user entries with a common name that starts with andy, steve, or margaret
(!(mail=*))	Get all entries without an email attribute

Special characters

Getting started > Finding directory objects > LDAP Syntax > Special characters

If any of the following special characters must appear in the search filter as literals, they must be replaced with the listed escape sequence.

Table 3: Special characters
ASCII Character	Escape Sequence Substitute
*	\2a
(	\28
)	\29
\	\5c
NUL	\00

In addition, arbitrary binary data may be represented using the escape sequence syntax by encoding each byte of binary data with the backslash (\) followed by two hexadecimal digits. For example, the four-byte value 0x00000004 is encoded as \00\00\00\04 in a filter string.

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating

© 2024 One Identity LLC. ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center