Determine dynamic groups in scripts

Is there a way to determine whether a group was dynamic and under the control of Active Roles??

I had tried using the 'edsaOriginatingService' attribute but it does not seem to be an available property when scripting with VB or C++.

Is it that I am doing something wrong (most likely!) or is there another property on the group that I can use so that these groups are excluded

I am using Actives Roles v6.0.4.

Any help appreciated.

Parents
No Data
Reply
  • If you read group attributes through ARS Service, there is a group virtual attribute - edsaIsDynamicGroup - that is set to TRUE for a dynamic group. If you are reading group properties directly from AD (bypassing ARS), by default group membership rules are stored in accountNameHistory attribute.
Children
No Data