Get-QARSOperation

From PowerGUI Wiki

Retrieve operation records from ActiveRoles Server. Each operation record represents a certain change request, whether pending or completed, in ActiveRoles Server.

This cmdlet is part of the Quest ActiveRoles Server product. Use Get-QARSProductInfo to view information about ActiveRoles Server.

Syntax

Get-QARSOperation [[-TargetObject] <IdentityParameter[]>] [-AttributesChanges <hashtable>] [-ChangedAttributes <string[]>] [-CompletedAfter <DateTimeParameter>] [-CompletedBefore <DateTimeParameter>] [-CompletedOn <DayParameter>] [-CompletedRecently <RelativeDateTimeParameter>] [-Connection <ArsConnection>] [-ConnectionAccount <string>] [-ConnectionPassword <SecureString>] [-Credential <PSCredential>] [-InitiatedAfter <DateTimeParameter>] [-InitiatedBefore <DateTimeParameter>] [-InitiatedBy <IdentityParameter[]>] [-InitiatedByMe] [-InitiatedOn <DayParameter>] [-InitiatedRecently <RelativeDateTimeParameter>] [-OperationID <string[]>] [-OperationStatus <OperationStatus[]>] [-OperationType <OperationType[]>] [-ParentContainer <IdentityParameter[]>] [-Proxy] [-Service <string>] [-SizeLimit <int>] [-TargetObjectType <string[]>] [-UseGlobalCatalog] [<CommonParameters>]

Detailed Description

Use this cmdlet to retrieve information about requests to make changes to directory data using ActiveRoles Server. Each request causes an operation record to be created in the ActiveRoles Server Management History data store. The cmdlet provides access to operation records, allowing you to examine:

  Change History   Information on changes that were made to particular pieces
                           of directory data (directory objects and their attributes) 
                           using ActiveRoles Server. 

  User Activity       Information on directory data changes that were made
                           by particular users. 

For a discussion of the Management History feature, see "Management History" in the ActiveRoles Server Administrator Guide.

An operation record may represent a change request that is waiting for approval in ActiveRoles Server. Such operation records are created whenever the requested changes require approval in accord with the ActiveRoles Server approval rules, and include information about the associated approval tasks. Once all approval tasks associated with an operation are completed, the respective operation record is marked completed and the requested changes are either applied or denied depending the approvers' resolutions on the approval tasks (Approve or Reject). For more information about the change approval function, see "Approval Workflow" in the ActiveRoles Server Administrator Guide.

The objects returned by this cmdlet represent operation records that meet the search conditions specified, allowing you to access information about the respective change requests. You can discover what changes were requested, when and by whom change requests were initiated, when the requested changes were applied, as well as get identities of operation records for further processing such as retrieval and accomplishment of approval tasks.

The cmdlet has optional parameters that determine the server and the security context for the operation. The connection parameters could be omitted since a connection to a server is normally established prior to using this cmdlet. In this case, the server and the security context are determined by the Connect-QADService cmdlet.

If you do not use Connect-QADService and have no connection established prior to using a cmdlet, then the connection settings, including the server and the security context, are determined by the connection parameters of the first cmdlet you use. Subsequent cmdlets will use those settings by default.

Note that this cmdlet requires a connection to the ActiveRoles Server Administration Service, so the Proxy parameter must be used to establish a connection.

Parameters

 Canceled 

 Completed 

 Denied 

 Failed 

 InProgress 

 Pending 

 Create 

 Delete 

 Copy 

 Modify 

 GroupMembershipChange 

 Move 

 Rename 

 Deprovision 

 UndoDeprovision 

Examples

EXAMPLE 1

Get-QARSOperation -CompletedOn 'Today' -ParentContainer 'test.domain.com/container' -TargetObjectType 'user' -OperationType 'Modify' |	
 %{$_.TargetObjectInfo.DN} |	
 Group-Object |	
 %{$_.Name}

Description

List the user accounts from a particular container that were changed on the current date.

EXAMPLE 2

Get-QARSOperation -CompletedOn (get-date -year 2008 -month 9 -day 1) -ParentContainer 'test.domain.com/container' -TargetObjectType 'Group' -OperationType 'Create' |	
 %{$_.TargetObjectInfo.DN} |	
 Group-Object |	
 %{$_.Name}

Description

List the groups that were created in a particular container on September 1, 2008.

EXAMPLE 3

Get-QARSOperation -CompletedRecently ([TimeSpan]::FromDays(30)) -TargetObject 'domainName\groupName' -OperationType 'GroupMembershipChange' |	
 %{$_.InitiatorInfo.NTAccountName} |	
 Group-Object |	
 %{$_.Name}

Description

List the names of the security principals that added or removed members from a particular group during last month.

EXAMPLE 4

Get-QARSOperation -TargetObject 'domain\user' -OperationType 'Modify' -ChangedAttributes 'edsaPassword' |	
 %{$_.InitiatorInfo.NTAccountName} |	
 Group-Object |	
 select Name

Description

List the names of the security principals that changed or reset the password of a particular user account.

EXAMPLE 5

Get-QARSOperation -CompletedRecently ([TimeSpan]::FromDays(7)) -TargetObjectType user -ParentContainer 'test.domain.com/container' -InitiatedBy 'MyDomain\JSmith' |	
 %{$_.TargetObjectInfo.DN}

Description

List all user accounts from a particular container that were changed by the user 'MyDomain\JSmith' during last week.

EXAMPLE 6

Get-QARSOperation -TargetObject 'domain\user' -ChangedAttributes l,streetAddress -CompletedOn ((get-date).AddDays(-1)) |	
 %{$_.InitiatorInfo.NTAccountName} |	
 Group-Object |	
 select Name

Description

List the names of the security principals that changed the City (l) or Street Address (streetAddress) attribute on the account of a particular user account yesterday.

EXAMPLE 7

Get-QARSOperation -ParentContainer test.domain.com/container -TargetObjectType group -OperationType 'GroupMembershipChange' -CompletedAfter (get-date -year 2008 -month 9 -day 15 -hour 0 -minute 0 -second 0) -CompletedBefore (get-date -year 2008 -month 9 -day 30 -hour 23 -minute 59 -second 59) |	
 %{$_.TargetObjectInfo.DN} |	
 Group-Object |	
 %{$_.Name}

Description

List the groups from a particular container that had the membership list (Members attribute) changed during the time period from September 15, 2008 to September 30, 2008.