The current set of PowerShell cmdlets allow modifications of directory objects which is good, but it would also be extremely helpful to be able to make modifications to the DRA delegation model using PowerShell cmdlets. Examples: Enumerate/create/delete ActiveViews; enumerate/add/update/delete ActiveView rules; enumerate/create/delete Assistant Admin groups; enumerate/add/update/delete Assistant Admin group rules; enumerate/create/delete delegations. Some of this (but not all) is possible to do using EA.exe command-line tool, but it's pretty slow.

Comments

  • Bill, thank you for the comments regarding PowerShell cmdlest around the delegation model. It is a great consideration for a feature in an upcoming release.

  • For those who would like to use EA.exe but find that it's too hard to use, I wrote a PowerShell module that acts as a "wrapper" for EA.exe that (at least to me) is a lot easier to understand and use. You can download the installer from the Releases section of the GitHub project page: https://github.com/Bill-Stewart/PowerShell-DRADelegation -- also, feel free to leave questions or problems on the Issues tab. I expect that this project will be obsolete once MicroFocus/NetIQ adds native support, but this is getting me by for now.

  • For any interested - I've added some functionality to the DRADelegation module: Added features are DRA server discovery, more responsive enumeration of objects, and retrieval of delegation details. Hopefully this is useful until MicroFocus/NetIQ adds native delegation management to their PowerShell module.