8paul

the specification for the resources file contains a field called "access type": - Access type (32-bit integer: 0 = grant or 1 = deny, simple format default: 0) is that not what you are looking for?

I have tested and verified that it does not work as expected but i would put that in as a bug report instead of as a feature request Regards

Hey lmu, what exactly does not work? Your template works fine for me.

Hi lmu, unfortunately ARMs API does not extend to the request system. Everything you can do through the API is a direct action, no requests and approvals there.

Hi lmu, the searchfield is currently not supported in the web interface. An alternative you can use is the AccountSearchTextField, it requires an additional attribute but i have explained the setup in this answer previously: thwack.solarwinds.com/.../184870

Hi lmu, with the exception of some pre-defined attributes (the ones shown at the top of the input mask) the order in the ui should reflect the order of the attributes in your template. Ex: In fat client: In the web ui:

Hi lmu, what exactly do you mean with new request? A request through ARMs request system? If so unfortunately the answer is no. What you can do though is run scripts after the user creation. (https://documentation.solarwinds.com/en/success_center/arm/content/configure-scripts.htm) In case you are using custom templates the…

Hi lmu, unfortunately group templates are not supported in the web interface currently.

The Soft Delete action itself is available via right click on the account object. To run additional scripts when executing the action you need to configure the script in the "Scripting" section of the ARM config. Should look something like this:

Hi Nicholse, of the things you listed ARM does currently support disabling the account and moving it to a separate OU via the "Soft delete" action. But as part of that action you can also additionally run a script which could do the other steps.

Hi Daniel, you should be able to use the SID in the template, works just fine for me.

Hi James, have you configured an account in the Credentials property in the script config? The labeling in that section is misleading (it says if you dont put in an account it will use the AD service account but that is not true, it will actually use SYSTEM which could explain your issue).

Hi lmu, have you tried just passing {createmailbox} to the script? In case that does not work the best option would probably be to just do a get-mailbox for the user in the script and only execute the rest of the code if a mailbox exists.

Hi darryld, I´ve changed the input validation to allow for digits in the tld. You can find an updated version in the template generator thread.

I thought the guys added a parameter for that, do you not see something like username or something like that in the parameter selection for the template? If not what you can do is pass the UserAuthZToken, authenticate against the API and then fetch the user from the info provided in the API token. At the time i last did…

Hi Marc, i dont think that is currently possible, maybe it could be an alternative to have the opentemplate run a script which plots out the memberships and sends them to the requester via email?

Hi Marc, what is the point of making this editable as attribute? Will your users write correct distinguished names into the textfield? I´m pretty sure memberOf is a special case that is handled differently in the tool than normal attributes. What is it you want to achieve? You can just allow users to change group…

Hi HPSAdmin, for multivalue attributes you need to use a different TypeInfo. Here is an example: <proxyAddresses> <AliasDisplayName type="System.String">proxyAddressesMV</AliasDisplayName> <TypeInfo type="System.String">System.String[]</TypeInfo> <AttributeEditType type="System.String">StringMultiValue</AttributeEditType>…

Hi Leo, the credentials tag is not the right place for this configuration. Here is an example config for some context: <config> <changeConfiguration> <activeDirectory> <PropertiesToLoad…

Hi Rob, if you feel comfortable sharing the armServer.log I can have a look at it. If you don´t I´d recommend opening a support ticket. I assume you are not using the application ID for the scan (because you mentioned AzureAD etc., those use a different connection mechanism)? Regards Paul

Hi Josbot, the facility level set on the switch needs to match the one configured on the connector. To check if you are receiving data from the switch you can use the checklogs command via CMC: https://support.solarwinds.com/SuccessCenter/s/article/Use-the-CMC-checklogs-command-to-display-log-files?language=en_US Also be…

I can replicate the issue, my version behaves the same if i try to change it for anything but the global config. Smells like a bug to me 

Hi Jonas, is it possible that you did not save the changes to the blacklist before trying to make the ACL change? You have to either hit the "Apply" button in the upper right or exit the view through the back button and hit "Save". For me that works just fine on 2020.2.4. In case you saved the config, how long does it take…

the switch is: <fileSystem.change.manageShareListRights type="System.Boolean">True</fileSystem.change.manageShareListRights> to be configured in pnserver.config.xml

No problem, in case you notice other missing filters you want to restore you can look up their definition in the SEM online demo: sem.demo.solarwinds.com/

This is the filter definition in the current version:

Hi Boehma, you can configure a default domain in the pnserver config using this switch: <webclient.configuration.defaultDomain type="System.String">dom.local</webclient.configuration.defaultDomain> in case that doesnt work you can try the more verbose syntax: <webclient> <configuration> <defaultDomain…

Hi Boehma, while you can not define the creationrules for other attributes in the change config you can for the samAccountname. Regexes also work fine for me: in this example i take 0-4 letters from the firstname and 0-4 letters from lastname. if you just want to take whatever combination you can do…

Hi Boehma, can you provide some more details please? What should the samaccountname be generated from, does it always need to be exactly 8 characters or only up to 8 characters etc. P.S. you can also configure the creationrule for the samaccountname in the ARM config under "Change Configuration" -> "Active Directory"

Just remove the ScriptOptions element from the template and it should show up