SmartConsole - OU-Based object

[jphwtx]

Hi all,

I want to create a dynamic object that uses OUs (ie. containing AD-registered machines) rather than using a group of AD servers. What's the recommended way to do this? I have R81.20 on Maestro, and Identity Collector. 

[Bob_Zimmerman]

It sounds like you're describing an Access Role object. I've never used these directly, I've just seen them in my API work.

[jphwtx]

It is an Access Role object. Does anyone have suggestions here?

[PhoneBoy]

An Access Role is correct:

This implies creating an LDAP Account Unit and possibly one or more LDAP Groups.

[jphwtx]

The question is - can I do this based upon OU (ie. all machines in a given OU), or does it have to be group-based?

[PhoneBoy]

I suppose you could do "all identified machines" which would use any machine identity.
Otherwise, it probably has to be done as a group.