Symantec IGA

  • 1.  etautil for update account template in AD

    Posted Aug 09, 2016 03:14 PM

    Hi Guys,

    I need to change 6500 accounts templates in Identity Manager for Active Directory in identit and I would not like to change 1 by 1. Do you know way to do this?



  • 2.  Re: etautil for update account template in AD
    Best Answer

    Broadcom Employee
    Posted Aug 10, 2016 02:44 AM

    Hi,

     

    Following are few useful commands for Account Template object. You need to modify a bit as per your requirement:

     

     

    1) Creation of AT as a copy of existing one (first – template, second – new one):

    copy 'eTADSPolicyContainerName=Active Directory Policies,eTNamespaceName=CommonObjects' eTADSPolicy eTADSPolicyName='AD_AT_Template' to eTADSPolicyName='TEST7_AD_AT';

     

    2) Attach endpoint to AT:

    add 'eTADSPolicyContainerName=Active Directory Policies,eTNamespaceName=CommonObjects' eTADSPolicy eTADSPolicyName='TEST10_AD_AT' in 'eTNamespaceName=ActiveDirectory,dc=im' eTADSDirectory eTADSDirectoryName='telma02-i105892.testca.com';

     

    3) Attach group with AT:

    update 'eTADSPolicyContainerName=Active Directory Policies,eTNamespaceName=CommonObjects' eTADSPolicy eTADSPolicyName='TEST11_AD_AT' to +eTADSmemberOf='CN=Performance Log Users,CN=Builtin,DC=testca,DC=com';

     

    4) Remove group from AT:

    update 'eTADSPolicyContainerName=Active Directory Policies,eTNamespaceName=CommonObjects' eTADSPolicy eTADSPolicyName='TEST11_AD_AT' to -eTADSmemberOf='CN=Performance Log Users,CN=Builtin,DC=testca,DC=com';

     

     

    5) Attach AT with Provisioning Role:

    add 'eTADSPolicyContainerName=Active Directory Policies,eTNamespaceName=CommonObjects' eTADSPolicy eTADSPolicyName='TEST10_AD_AT' in 'eTRoleContainerName=Roles,eTNamespaceName=CommonObjects,dc=im' eTRole eTRoleName='TEST8_AD_PR';

     

     

     

    Thank you,

     

    Best regards,

    Sumeet



  • 3.  Re: etautil for update account template in AD

    Posted Aug 10, 2016 11:06 AM

    Summet,

     

         Tks for your support.

     

    Have a nice day!

     

     



  • 4.  Re: etautil for update account template in AD

    Broadcom Employee
    Posted Dec 06, 2018 12:43 PM

    Is there a etautil command to "replace" the AT contained within a Role?