Creating Active Directory Group with additional attribute values in Soap request
search cancel

Creating Active Directory Group with additional attribute values in Soap request

book

Article ID: 17209

calendar_today

Updated On:

Products

CA Identity Manager CA Identity Governance CA Identity Portal

Issue/Introduction

Requirement is to modify the task "Create Active Directory Group" so one can specify additional attributes when an Active Directory Group is created on the endpoint.

e.g. One of the attributes which can be added  is "Accept Message from Distribution List" (dlMemSubmitPerms), that accepts the distinguished name of a distribution list.

Is it possible to specify a value of dlMemSubmitPerms in a TEWS call?

Tried Native AD DN as well as IAM handler DN - Neither of the options seem to be accepted

 

Resolution

It seems as though the expected Syntax is indeed JSON 

<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:wsdl="http://tews6/wsdl">
<soapenv:Header/>
<soapenv:Body>
<wsdl:TaskContext>
<wsdl:admin_id>imuser</wsdl:admin_id>
<wsdl:admin_password>IMpassword</wsdl:admin_password>
</wsdl:TaskContext>
<wsdl:CreateActiveDirectoryGroup>
<wsdl:CreateActiveDirectoryGroupSearch>
<wsdl:CreateNew>TRUE</wsdl:CreateNew>
<wsdl:EndpointGroupSearch>
<wsdl:ContainerHandle>ADSOrgUnit=IDM,EndPoint=AD1,Namespace=ActiveDirectory,Domain=im,Server=Server</wsdl:ContainerHandle>
</wsdl:EndpointGroupSearch>
</wsdl:CreateActiveDirectoryGroupSearch>
<wsdl:CreateActiveDirectoryGroupActiveDirectoryGroupGroupTab>
<wsdl:_PCT_ENDPOINT_CAPABILITY_NAME_PCT_>Group1</wsdl:_PCT_ENDPOINT_CAPABILITY_NAME_PCT_>
<wsdl:ntAccountId>Group1</wsdl:ntAccountId>
<wsdl:displayName>Any Name</wsdl:displayName>
<wsdl:ADSdescription>Distribution List</wsdl:ADSdescription>
<wsdl:groupScopeInternal>Global</wsdl:groupScopeInternal>
<wsdl:groupTypeInternal>Distribution</wsdl:groupTypeInternal>
<wsdl:DLMemSubmitPerms>{"name":"ADSGroup=Group2,ADSOrgUnit=IDM,EndPoint=AD1,Namespace=ActiveDirectory,Domain=im,Server=Server"}</wsdl:DLMemSubmitPerms>
</wsdl:CreateActiveDirectoryGroupActiveDirectoryGroupGroupTab>
</wsdl:CreateActiveDirectoryGroup>
</soapenv:Body>
</soapenv:Envelope>