Transform for AD admin account

Identity Security Cloud (ISC) ISC Discussion and Questions
, ,
1

Hi Team,

We need to build a transform for finding AD admin account based on user sAMAccountName from AD?

If the user sAMAccountName contains “-admin” then we need to populate it as admin account or normal account?

Thanks
Kalyan

3

Hi everyone,

We have built the transform as below for AD admin account

“type”: “static”,
“attributes”: {
“isAdmin”: {
“attributes”: {
“values”: [
{
“type”: “accountAttribute”,
“attributes”: {
“attributeName”: “sAMAccountName”,
“sourceName”: “hades.underworld”,
“accountPropertyFilter”: “(attributeName.contains("-admin"))”
}
},
{
“attributes”: {
“value”: “isAdmin”
},
“type”: “static”
}
]
},
“type”: “firstValid”
},
“value”: “#if ($isAdmin != ‘isAdmin’) Yes #else No #end”
},
“internal”: false
}

Thanks
Kalyan

4 
{
    "type": "static",
    "attributes": {
        "isAdmin": {
            "type": "firstValid",
            "attributes": {
                "values": [
                    {
                        "type": "accountAttribute",
                        "attributes": {
                            "sourceName": "AD",
                            "attributeName": "sAMAccountName",
                            "accountPropertyFilter": "(sAMAccountName.contains(\"-admin\"))"
                        }
                    },
                    "none"
                ]
            }
        },
        "value": "#if($isAdmin == 'none')Normal Account#{else}Admin Account#end"
    }
}
5

Hi @KRM7 thank you for the update and it is giving below error
There was an exception while calculating the value for this attribute. Error during transformation for attribute: isadmin (Transform ID: isAdminAccount) Cause: Error rendering template: #if($isAdmin == none)Normal Account#{else}Admin Account#end

6

There is a brace missing in filter at the end and quotes in none, add it and test.

7

Hi,
It looks like u forgot to keep none in the single quotes in the Value

8

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.