UMRA - User Provisioning

If you haven’t already, please read my first post on where and how to download a trial version of User Management Resource Administrator, developed by tools4ever.

Download Trial Version of UMRA > http://www.tools4ever.com/download/

In recent posts we’ve learned how to do some user provisioning with UMRA MASS module. We’ve also learned how to use “Map Tables” and If/Then/Elses. However, there is another key “Action” in UMRA that we have not touched on yet, and that is the “For Each” Action. What is this you ask? The “For Each” Action allows you to loop through a table of data, such as users, OU’s, groups, or different types of Active Directory Objects. Pass the Objecs data to another UMRA project script and have it execute actions on that Object. How did this help me with my identity management needs…simple it allowed me to make smaller more manageable scripts that really helped keep my Active Directory clean, and unpolluted. I am now able to run a specific UMRA project script, have it do all of my user management tasks in 1 run, rather then having to run multiple scripts or use other programs to finish these needs.

So let me show you how I was able to create a very small UMRA script that was able to help me with my user provisioning of student accounts.
If you need help with setting up data from a CSV please see my post here.
Steps for Creating the UMRA script:Step 1: Create a New UMRA script can call it “For Each Loop Test”
A. Set up your CSV in the “data tab” see this post for help.
Step 2: Drag/Drop 1 “Generate generic table” action to your script. This can be found under the tree Variable actions > Table > Generate generic Table
Step 3: Configure the “Gernerate gerneric table”
A. Click “configure”, then in the “Table Type” select “LDAP query
B. Click “LDAP binding” tab, and the click the radio button Binding string, and enter your binding, see the examples on the screen on how to format this string
C. Click “LDAP Filter” tab, and in the drop down, select the filter “All users” and then press “Insert”
D. Click “Attributes” tab, and Add the attributes, Samaccountname, and description
E. Click “Variable” tab, and give the table the variable “%user_table%”
F. You now can click “Run Test” tab, and see your users within your OU that you selected.

Step 4: Drag/Drop 1 “For-Each” Action to your script. This can be found under the tree Variable actions > Programming > For-Each
Step 5: Configure your “For-Each” action like below:
A. The Table variable name will be the table we created earlier of users
B. The Project name is the project we will send this table of data to
C. The Variable of project column is the variable we set for each loop through the table.
user management resource administrator
Step 6: Create a New UMRA script can call it “For Each Loop Test 2” This will be the script that we will execute when we lop through our table.

Step 7: Drag/Drop 1 “Get user (AD)” Actions to your new UMRA script. This action can be found under the tree User > Active Directory > Get User (AD)
A. Configure your “Get user (AD)” similar to the pics below
a. If you need help with this, please see this post here.

user management resource administrator
Step 7: Drag/Drop 1 “Export variables” Actions to your new UMRA script. This action can be found under the tree Variable actions > Variable operations > Export variables
B. Configure your “Export variables” similar to the pics below

user management resource administrator

With that, your UMRA scripts are ready to go. What does this script do you ask? It will help you with getting users in your Active Directory information, and write that data to a CSV file. Now that you have this CSV file, you can either run this data through another UMRA project you have or email or send the CSV to someone. This particular method has helped me out in nervous projects.

0 comments:

Post a Comment