CA Service Management

  • 1.  Query Embedded Entitlements Manager Group Membership

    Broadcom Employee
    Posted Apr 01, 2016 11:33 AM

    Hi, I'm looking for a way to programmatically query EEM and find users that belong to an Application Group. Is there a way to query EEM using web services, CLI, LDAP, etc?

    I'm using EEM 12.0.0.33 integrated with CA Service Catalog. I'm using an external LDAP Directory as the User Store but I have Application Groups configured with users associated with them. Specifically, I need a way that will do this in the GUI:

     



  • 2.  Re: Query Embedded Entitlements Manager Group Membership
    Best Answer

    Posted Apr 04, 2016 12:32 PM

    I'm not sure this is possible without the EEM SDK, which is not included with EEM Server that is shipped with Service Catalog. From the EEM Programming Guide (again not included with EEM Server) it seems you would need to leverage the soRetrieveByName method however this does not appear to be a supported safex operation.



  • 3.  Re: Query Embedded Entitlements Manager Group Membership

    Broadcom Employee
    Posted Apr 04, 2016 12:52 PM

    Thanks Jason. I will have to find a workaround for what I’m trying to do.



  • 4.  Re: Query Embedded Entitlements Manager Group Membership

    Broadcom Employee
    Posted Apr 08, 2016 11:12 AM

    I opened up a case when I posted this question here in the communities and was able to get this from an EEM SME. I've confirmed this works so I would only need to read the xml output and parse out the data I'm looking for.

     

    Hi Ryan,

     

    One of our EEM Subject Matter Experts provided the
    following information which may be a solution for your question:

     

    Create a file named getUsers.xml

    In this file put in the following:

     

    <Safex>

    <Attach label="Process Automation"/>

    <Export appobjects="n"
    policies="n" calendars="n" users="y"
    usergroups="n" folders="n" globalsettings="n"
    globalusers="n" globalusergroups="n"
    globalfolders="n" file="getUsers_return.xml"/>
    <Detach/> </Safex>

     

    Change the 'Attach label=' label of 'Process Automation'
    to whatever the registered application is.

    Save the file under the Embedded Entitlements Manager/bin
    folder Open a command window and navigate to this same folder Run the following
    command

     

    C:\Program
    Files\CA\SC\EmbeddedEntitlementsManager\bin>safex -h localhost -u EiamAdmin
    -p YourPassword -f getUsers.xml

     

    Obviously change the password appropriately.

    The last entries in the file (search for the first
    occurrence of “User folder”) will be the users that are a member of this
    registered application.

    The EEM SME also cautions that you cannot copy/paste the
    safex string from this email. It must be typed it out in the command window
    completely, otherwise all you will get is an error message returned.