Create Active Directory Group - Specifying dlMemSubmitPerms value in Soap Request

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Portal
• CA Risk Analytics
• CA Secure Cloud SaaS - Arcot A-OK (WebFort)
• CLOUDMINDER ADVANCED AUTHENTICATION
• CA Secure Cloud SaaS - Advanced Authentication
• CA Secure Cloud SaaS - Identity Management
• CA Secure Cloud SaaS - Single Sign On

Issue/Introduction

We require to modify the task Create Active Directory Group so the customer can specify additional attributes when an Active Directory group is created on the endpoint.

One of the attributes which can be added  is "Accept Message from Distribution List" (dlMemSubmitPerms), that accepts the distinguished name of a distribution list.

 

How do we specify a value of dlMemSubmitPerms in a TEWS call?

Tried Native AD DN as well as IAM handler DN - Neither of the options seem to be accepted

 

Environment

IM 14.xIM 12.6 SPx

Resolution

It seems as though the expected Syntax is indeed JSON 

<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:wsdl="http://tews6/wsdl">
<soapenv:Header/>
<soapenv:Body>
<wsdl:TaskContext>
<wsdl:admin_id>imuser</wsdl:admin_id>
<wsdl:admin_password>IMpassword</wsdl:admin_password>
</wsdl:TaskContext>
<wsdl:CreateActiveDirectoryGroup>
<wsdl:CreateActiveDirectoryGroupSearch>
<wsdl:CreateNew>TRUE</wsdl:CreateNew>
<wsdl:EndpointGroupSearch>
<wsdl:ContainerHandle>ADSOrgUnit=IDM,EndPoint=AD1,Namespace=ActiveDirectory,Domain=im,Server=Server</wsdl:ContainerHandle>
</wsdl:EndpointGroupSearch>
</wsdl:CreateActiveDirectoryGroupSearch>
<wsdl:CreateActiveDirectoryGroupActiveDirectoryGroupGroupTab>
<wsdl:_PCT_ENDPOINT_CAPABILITY_NAME_PCT_>Group1</wsdl:_PCT_ENDPOINT_CAPABILITY_NAME_PCT_>
<wsdl:ntAccountId>Group1</wsdl:ntAccountId>
<wsdl:displayName>8979EXW Verteiler</wsdl:displayName>
<wsdl:ADSdescription>Distribution List</wsdl:ADSdescription>
<wsdl:groupScopeInternal>Global</wsdl:groupScopeInternal>
<wsdl:groupTypeInternal>Distribution</wsdl:groupTypeInternal>
<wsdl:DLMemSubmitPerms>{"name":"ADSGroup=00036366VAL,ADSOrgUnit=IDM,EndPoint=AD1,Namespace=ActiveDirectory,Domain=im,Server=Server"}</wsdl:DLMemSubmitPerms>
</wsdl:CreateActiveDirectoryGroupActiveDirectoryGroupGroupTab>
</wsdl:CreateActiveDirectoryGroup>
</soapenv:Body>
</soapenv:Envelope>