Programmatically set "Enable auto-provisioning" on Provisioning Tab of the zone properties dialog
08-09-2016 05:19 PM
Is there a way to use the PowerShell cmdlets to set the "Enable auto-provisioning" checkbox on the Provisioning Tab of the zone properties dialog? I am using Centrify Server Suite 2014.
There are several GUI items I am not able to find int he APIs, and this is the first one. Perhaps I am looking in the wrong place? Is there a different way to do this other than clicking the GUI? I am trying to fully script our system setup andd I am stopped at this point.
Solved! Go to Solution.
08-10-2016 03:46 AM
Welcome to the Centrify Forums.
What part of the system setup are you trying to script?
Suite 2014 is old, you should be entitled to upgrades if commercial customers. All DirectManage consoles are backwards-compatible and expose you to new features.
Remember that the "auto-provisioning" tab only exists if the Zone Provisioning Agent utility is installed on the system.
The automation of that piece implies the use of the MSI package for installation.
For automation of Access/Privilege operations, most customers either use PowerShell or adedit.
Some PowerShell examples:
Finally, you should be able to update the SDK if under maintenance too.
If you tell me exactly what you're trying to automate, we can provide examples.
08-10-2016 08:19 AM
In a nutshell, I am trying to script the entrie configuration of Direct Manager Access on my domain controller. I create a zone, I can add the users and groups, add roles and assignments, etc. I just can't figure out how to programmatically set the properties of a zone so that the "enable auto-provisioning" flag is set. I also want to set everything else on that Tab as well. I will go look ad adedit as well to see if that helps.
I have looked at the PowerShell howto guide and the API and there are no functions that I can see that cover how to set auto provisioning of a zone. I would be happy to look at the 2016 version to see if that will help, please let me know what I need to provide in order to download it.
08-10-2016 08:36 AM
Several things here:
a) I hope you're not working directly in a Domain Controller (this is a poor security practice).
b) The commandlet, Set-CdmZpaSetting has all the information you need to set for automatic provisioning for a particular zone. Use the link I gave you and check out the help for the commandlet. Please make sure that you're using the latest version of Centrify DirectManage PowerShell. If this is exposed on PowerShell, it's in the SDK as well.
NAME Set-CdmZpaSetting SYNOPSIS Updates the provisioning rules for a specified zone. SYNTAX Set-CdmZpaSetting -Zone <CdmZone> [-UserEnabled [<Boolean>]] [-GroupEnabled [<Boolean>]] [-UidOption <UidOptionType>] [-UidExplicitPattern <String>] [-UidCustomAttribute <String>] [-GidOption <GidOptionType>] [-GidExplicitPattern <String>] [-SourceZone <CdmZone>] [-UserSource <CdmGroup>] [-GroupSource <CdmGroup>] [-PrimaryGidOption <PrimaryGidOptionType>] [-PrimaryGidExplicit <String>] [-UserUnixNameOption <UnixNameOptionType>] [-UserUnixNameExplicitPattern <String>] [-GroupUnixNameOption <UnixNameOptionType>] [-GroupUnixNameExplicitPattern <String>] [-UnixNameInvalidCharacterOption <InvalidCharacterOptionType>] [-UnixNameTruncateOption <TruncateOptionType>] [-UnixNameValidCharacters <String>] [-UnixNameLowerCase [<Boolean>]] [-UnixNamePrefix <String>] [-UnixNameRetryDuplicatedNames [<Boolean>]] [-UnixNameRetryDuplicatedMaxNumber <Int32>] [-HomeDirectoryOption <HomeDirectoryOptionType>] [-HomeDirectoryExplicitPattern <String>] [-ShellOption <ShellOptionType>] [-ShellExplicitPattern <String>] [-GecosOption <GecosOptionType>] [-GecosExplicitPattern <String>] [-IgnoreDisabledAccount [<Boolean>]] [-GroupPrioritySetting <String>] [-PipelineVariable <String>] [<CommonParameters>] DESCRIPTION You can configure the business rules for automated provisioning of user and group profiles on a zone-by-zone basis. This cmdlet enables you to set the provisioning settings defined for a specified zone. RELATED LINKS REMARKS To see the examples, type: "get-help Set-CdmZpaSetting -examples". For more information, type: "get-help Set-CdmZpaSetting -detailed". For technical information, type: "get-help Set-CdmZpaSetting -full".
c) If you're a current Centrify customer with a current maintenance contract, you should be able to use the download center and download the latest version of the consoles that includes PowerShell. I would contact the Centrify rep about the SDK, if it's under maintenance you should be able to get the latest version as well.
08-10-2016 09:18 AM
Thank you for your assistance. A collegue with access to the downloads page has downloaded the new version for me and I will test with this new version on my development environment.