User management with mgmt_cli.exe

Jeremy_Parker — Fri, 08 Feb 2019 07:38:48 GMT

Hello,
I'm trying to write a simple powershell toolbox to help us manage some of our more manual tasks with checkpoint. Mainly user related.

We are currently running 80.20

I'm able to query users through from mgmt_cli via show objects, this lets me see expiring users

$temp = .\mgmt_cli.exe show objects limit 500 offset 0 order.1.ASC "name" in.1 "name" in.2 "userprefix*" type "object" details-level full -m servername --format json --session-id $sid $all = $temp | ConvertFrom-Json

foreach($acc in $all.objects){ if(HasProperty $acc "expirationdate"){ try{ $expdate = [datetime]::Parse($acc.expirationdate) } catch { write-host ("date error for record: " + $acc.name) } *Play with or return user details here*

} }

I'm hoping to be able to change users expiry dates, create new users, add users to groups etc.
Is this possible through mgmt_cli?

Are there better ways to do this that can be done from powershell?
I have a vague assumption from reading through other threads that it's going to involve generic-objects but I'm not sure how to properly use them.

Thanks =]

Re: User management with mgmt_cli.exe

Joshua_Hatter — Fri, 21 Jun 2019 09:17:49 GMT

https://community.checkpoint.com/docs/DOC-2842

topic User management with mgmt_cli.exe in API / CLI Discussion

User management with mgmt_cli.exe

Re: User management with mgmt_cli.exe