How can I email a newly created user's group membership?

Question

Would it be best to use the standard Powershell to pull the user's group membership and can that be embedded in a notification email after a user is created? Or is there a variable that will do this that I seem to be missing.

Answer 1

Hello,

Using a PowerShell script is the only option here. The following script from our repository should be helpful: https://scripts.adaxes.com/get-multivalued-property-values-and-send-mail.

Comments

This does help but I just want to confirm what multivalued property I would be using in this case. Looking at the list here: https://www.adaxes.com/help/CalculatedProperties/ I'm not seeing a calculated property for group membership. Would this just be a %memberOf% property I would substitude in or something else?

---

Hello,

You will just need to use the memberOf property. It is not present in the list of calculated properties as it a standard AD one. Also, pay attention that you need to set the $propertyName variable to the schema name of a property, not a value reference. As such, the first line of the script in your case should be as follows:

$propertyName = "memberOf" # TODO: modify me

---

Oh AD membership won't cut it. I also need Entra group membership. This property doesn't include cloud only groups the user is a member of.

---

Hello,

In this case, you need use the following approach:

$groupGuids = $Context.TargetObject.GetEx("adm-DirectMemberOfGuid")

It will get you the GUIDs of all the groups the target user is a member of including Microsoft Entra ones. Pay attention that the latter part will only work in case you ahve your Microsoft Entra domain registered in Adaxes (the domain will be visible under the Managed domains node in the Administratoin console).

---

I actually got this sorted out. Thank you.

# Email settings
$to = "notify@domain.net"
$subject = "New User Group Membership"

try {
    $groupGuidBytesList = $Context.TargetObject.GetEx("adm-DirectMemberOfGuid")
}
catch {
    $groupGuidBytesList = $null
}

if ($null -eq $groupGuidBytesList) {
    $groupLines = @("No direct group memberships found.")
}
else {
    $groupLines = foreach ($groupGuidBytes in $groupGuidBytesList) {
        try {
            $groupGuid = New-Object System.Guid (, $groupGuidBytes)
            $groupGuidString = $groupGuid.ToString("B")

            $group = $Context.BindToObject("Adaxes://<GUID=$groupGuidString>")

            $groupName = $group.Get("name")

            "$groupName`t"
        }
        catch {
            "Failed to resolve group GUID bytes: $($_.Exception.Message)"
        }
    }
}

$message = @"
User: $($Context.TargetObject.Get("name"))

Groups:
$($groupLines -join "`r`n")
"@


$Context.SendMail($to, $subject, $message, $null)