Chat now with support
Chat with Support

Identity Manager Data Governance Edition 8.1.5 - IT Shop Resource Access Requests User Guide

One Identity Manager Data Governance Edition IT Shop Resource Access Requests User Guide Resource access requests Share creation requests PowerShell commands

Add-QManagedGroupTemplate

Adds a managed group template to the Data Governance Edition deployment to define the hierarchy of Active Directory groups to be created to support ACLs for managed resources.

Syntax:

Add-QManagedGroupTemplate -GroupNamingPattern <String> [-Description [<String>]] [-GroupType [<Int32>]] [-ParentGroupTemplateID [<String>]] [-IsSelfServiceGroup [<Boolean>]] [<CommonParameters>]

Table 42: Parameters
Parameter Description
GroupNamingPattern

Specify the default naming pattern to be used to name the group defined in the managed group template.

A naming pattern is a series of literals and embedded variables that allows a group name to be dynamically generated at run time.

Run the Get-QNamePatternResolver cmdlet to retrieve a list of available variables that can be used in the group naming pattern.

Description (Optional) Specify a description for the managed group template.
GroupType

(Optional) Specify the type of Active Directory group to be created as defined in the managed group template:

  • 0: Domain Local group (Default)
  • 1: Global group
  • 2: Universal group
ParentGroupTemplateID

(Optional) Specify the ID (GUID format) of a parent group template under which the group defined in this managed group template is to be created. When created, child groups are nested as members of their parent group.

When no parent group template is specified, a top-level (parent) group is created.

IsSelfServiceGroup

(Optional) Specify whether the group defined in the template is to be published to the IT Shop:

  • $true: Is available in the IT Shop
  • $false: Is not available in the IT Shop (Default)

Setting this flag limits the "best fit" calculation to only include groups that have this flag set to $true.

Examples:
Table 43: Examples
Example Description
Add-QManagedGroupTemplate -GroupNamingPattern L-[ShareName]-FC -GroupType 0 Adds a new top-level managed group template for a Domain Local group with a naming pattern of L-[ShareName]-FC.
Add-QManagedGroupTemplate -GroupNamingPattern G-[random]-FC -GroupType 1 -ParentGroupTemplateID b119eac0-7a92-45c3-b7af-6c97c8dc34f2 Adds a new managed group template for a Global group with a naming pattern of G-[random]-FC, nested under the specified Domain Local group.

Get-QManagedGroupTemplate

Retrieves a managed group template from the Data Governance Edition deployment.

Syntax:

Get-QManagedGroupTemplate [-Id [<String>]] [<CommonParameters>]

Table 44: Parameters
Parameter Description
Id

(Optional) Specify the ID (GUID format) of the managed group template to be retrieved.

If this parameter is not specified, all managed group templates in the database are returned.

Examples:
Table 45: Examples
Example Description
Get-QManagedGroupTemplate Returns a list of all managed group templates in the database.
Get-QManagedGroupTemplate -Id b119eac0-7a92-45c3-b7af-6c97c8dc34f2 Returns information on the specified managed group template.
Details retrieved:
Table 46: Details retrieved
Detail Description (Associated key or property in QAMManagedGroupTemplate table)
GroupNamePattern The pattern used to dynamically build the group name (GroupNamingPattern).
Description The description for the managed group template (Description).
GroupType Indicates the type of group to be created: Domain Local, Global or Universal (GroupType).
ParentGroupTemplateID The value (GUID) assigned to the parent group template used for building nested groups (UID_ParentGroupTemplate).
IsSelfServiceGroup Indicates whether this is a self-service group that is available in the IT Shop (IsSelfServiceGroup).
Id The value (GUID) assigned to the managed group template (UID_QAMManagedGroupTemplate).

Remove-QManagedGroupTemplate

Removes a managed group template from the Data Governance Edition deployment.

Syntax:

Remove-QManagedGroupTemplate -Id <String> [<CommonParameters>]

Table 47: Parameters
Parameter Description
Id

Specify the ID (GUID format) of the managed group template to be removed.

Run the Get-QManagedGroupTemplate cmdlet without any parameters to retrieve a list of available managed group templates and associated IDs.

Examples:
Table 48: Examples
Example Description
Remove-QManagedGroupTemplate -Id b119eac0-7a92-45c3-b7af-6c97c8dc34f2 Removes the specified managed group template from the Data Governance Edition deployment.

Set-QManagedGroupTemplate

Updates an existing managed group template in the Data Governance Edition deployment.

Syntax:

Set-QManagedGroupTemplate -Id <String> -GroupNamingPattern <String> [-Description [<String>]] [-ParentGroupTemplateID [<String>]] [-GroupType [<Int32>]] [-IsSelfServiceGroup [<Boolean>]] [<CommonParameters>]

Table 49: Parameters
Parameter Description
Id Specify the ID (GUID format) of the managed group template to be updated.
GroupNamingPattern

(Optional) Specify this parameter to update the group naming pattern used for the group defined in the template.

A group naming pattern is a series of literals and embedded variables that allows a group name to be dynamically generated at run time.

Run the -Get-QNamePatternResolver cmdlet without any parameters to retrieve a list of available variables.

Description (Optional) Specify this parameter to add or change the description of the managed group template.
ParentGroupTemplateID (Optional) Specify this parameter to change the parent group template for this managed group template. When created, child groups are nested as members of their parent group.
GroupType

(Optional) Specify this parameter to change the type of Active Directory group defined in the template:

  • 0: Domain Local group
  • 1: Global group
  • 2: Universal group
IsSelfServiceGroup

(Optional) Specify this parameter to change the self-service setting for the group defined in the template:

  • $true: Is available in the IT Shop
  • $false: Is not available in the IT Shop
Examples:
Table 50: Examples
Example Description
Set-QManagedGroupTemplate -Id b119eac0-7a92-45c3-b7af-6c97c8dc34f2 -GroupNamingPattern G-[rnd]-FC
-GroupType 1		 Changes the group type to a Global group in the specified managed group template.
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating