ActiveView: Attribute-based include and exclude rules

Idea ID 2801647

ActiveView: Attribute-based include and exclude rules

It would be very helpful if DRA had an ActiveView rule type that could select objects based on attributes. For example: Include (or exclude) user accounts where the employeeType attribute contains the string "contractor."

Tags (2)
3 Comments
Respected Contributor.
Respected Contributor.

I can work around this for now by installing the DRADelegation PowerShell module and doing this (e.g.):

New-DRAActiveView "Contractors"
Get-ADUser -LDAPFilter "(employeeType=Contractor)" | ForEach-Object {
  New-DRAActiveViewUserRule "Contractors" $_.SamAccountName $_.SamAccountName
}

This would, of course, need periodic synchronization. Built-in support would be better.

Micro Focus Frequent Contributor
Micro Focus Frequent Contributor
Status changed to: Waiting for Votes

Hi Bill,

 

Another approach to this is to consider the DRA Dynamic Group filter, which allows you to build group memberships based off attribute values.  You can build your filter and then create an AV based on the dynamic group.

Respected Contributor.
Respected Contributor.

Hi Jeff, this is a good idea as a workaround, albeit less elegant than native support or periodic synchronization. Thanks for the idea!

The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.