The script adds or removes objects from a specific group upon adding or removing them from another group. To use the script, create a business rule triggering After adding or removing a member from a group. An object will be added to or removed from the target group when added or removed from one of the groups in the Activity Scope of the rule.
In the following example, objects will be added or removed from the Resources group after adding or removing them from one of the groups located in the Resources OU.
Parameter:
- $targetGroupDN - Specifies the Distinguished Name (DN) of the group to add or remove members from.
PowerShell
$targetGroupDN = "CN=Resources,OU=Groups,DC=example,DC=com" # TODO: modify me
$group = $Context.BindToObjectEx("Adaxes://$targetGroupDN", $True)
if (($Context.Action.IsOperationOfType($Context.TargetObject, "remove group members")) -and
($group.IsMember("Adaxes://%member%")))
{
$group.Remove("Adaxes://%member%")
}
elseif (($Context.Action.IsOperationOfType($Context.TargetObject, "add group members")) -and (-not ($group.IsMember("Adaxes://%member%"))))
{
$group.Add("Adaxes://%member%")
}
Change the line with elseif to avoid this:
elseif (($Context.Action.IsOperationOfType($Context.TargetObject, "add group members")) -and (-not ($group.IsMember("Adaxes://%member%"))))
Hello,
Thank you for pointing out the issue. We have updated the script accordingly.