Remove Member From Groups

Introduction

Before using this valve the LdapClient module must be configured and deployed with matching name as defined in "namespace"

Configuration

Note

Valve name: ActiveDirectoryRemoveMemberFromGroups

Properties

Name	Description	Default value	Mandatory	Expanded
namespace	Bind to LdapClient module.	"default"
member_id	User/Member id.
groups_identifier	JsonArray with group objects or group DN.	"@json:${request.ad_pending_remove.all}"
id_property	Property on JSON object that contains the group DN.	"id"

Example

Example when data comes in pipe request:
{
  "name": "ActiveDirectoryRemoveMemberFromGroups",
  "config": {
    "namespace": "ldap01",
    "id_property": "id",
    "member_id": "${request.selected_ad_id}",
    "groups_identifier": "@json:${request.ad_pending_remove.all}"
  }
}

Example when data is generated in pipe:
{
    "name": "ActiveDirectoryRemoveMemberFromGroups",
    "config": {
        "namespace": "ldap01",
        "id_property": "id",
        "member_id": "${item.user_dn}",
        "groups_identifier": "@json:${item.groups.all}"
    }
}

Example pipe data (from pipe request)

  "selected_ad_id" : "CN=Britt Thomasson,OU=Demo,DC=company,DC=local",
  "ad_pending_remove": [
    {
        "id": "CN=AWS administrator,OU=access_review,OU=Governance,OU=IdM_demo,OU=Product_Testing,DC=company,DC=local",
        "description": "Test",
        "cn": "AWS administrator",
        "sAMAccountName": "AWS administrator"
    },
    {
        "id": "CN=Cert Publishers,CN=Users,DC=company,DC=local",
        "description": "Members of this group are permitted to publish certificates to the directory",
        "cn": "Cert Publishers",
        "sAMAccountName": "Cert Publishers"
    }
],