topic is there a way to see active directory domain of a user into an access-role object? in API / CLI Discussion

is there a way to see active directory domain of a user into an access-role object?

AleLovaz82 — Fri, 07 Mar 2025 13:32:24 GMT

Hi
I'm using access-role to grant permission to users from different domains ( let's say A and B )

in one access-rule object I can have users from both the domain ,is possible to have the domain ( or the full CN of the user ) as result of a mgmt_cli query ?

this is what I obtain from a single query

mgmt_cli -r true -d CMA1 show access-role name AR_VPNGROUP1 --format json

{
"uid" : "0d1d5680-6da9-4c3d-a72e-add559bd5c17",
"name" : "ad_user_PIPPO_PAPERINO",
"type" : "CpmiAdUser",
"domain" : {
"uid" : "699e0f39-3da1-6e4d-8ccf-2160acce691e",
"name" : "CMA1",
"domain-type" : "domain"
},
"icon" : "Objects/user",
"color" : "black"
}

it would be great to see in which domain is PIPPO PAPERINO or tue full CN of PIPPO PAPERINO

Re: is there a way to see active directory domain of a user into an access-role object?

PhoneBoy — Fri, 07 Mar 2025 16:08:54 GMT

If more details can be returned, they would be included by adding details-level full to the query.
It's also possible you might get some details by showing the details of the object itself.
Because the underlying object is not API friendly, you'll need to use the generic-object API to query it (e.g. show generic-object uid 0d1d5680-6da9-4c3d-a72e-add559bd5c17).

Re: is there a way to see active directory domain of a user into an access-role object?

AleLovaz82 — Fri, 07 Mar 2025 16:14:54 GMT

details-level full did the trick! now i've to play with jq and bash to extact what i need 🙂
Thx