Set-QADUser or Set-QADObject cmdlets allow group to be sat as user's manager (4369651)

Set-QADUser or Set-QADObject cmdlets allow group to be sat as user's manager

Set-QADUser or Set-QADObject cmdlets allow the group to be set as the user's manager. The Active Roles Management Shell should impose the same Active Directory restrictions as the native cmdlets allowing user or contact object type to be set on a user's Manager attribute.

This issue has been identified as a product defect and assigned the Defect ID 391836.

WORKAROUND
Use a workflow or script module with an onPreModify as well as onPreCreate to check if the manager attribute is being supplied in the request, and if it is, to throw an error if it's anything other than a user or contact object.

STATUS
The following bug ID 391836 has been created to address this issue and it will be fixed in a feature release version. Please refer to this article for updates or contact support referencing the product defect ID.

391836