Manage usergroups with powershell

Hello,

The cmdlets to manage the user groups are Get-RDMRole/Set-RDMRole. To assign users to user groups, the cmdlet Set-RDMRoleGroupRights and Set-RDMUserGroupRights will do the trick.

Let us know if you have further questions about these cmdlets.

Best regards,

Thanks for the answer.

Set-RDMRoleRights is not a cmdlet available in my environment, I have Set-RDMRoleGroupRights
I have read the help and examples of those cmdlets and I still don't know how to assign users to groups. Lets say get-rdmuser shows:

User1
User2
User3

And Get-RDMRole

Group1
Group2

Which command do I need to use to assign User1 to Group2 and User2 and User3 to Group1?

Hello,

Thank you for your feedback.

I want to apologize that I sent you on the wrong path. Those 2 cmdlets are for Security Groups and not User Groups.

The cmdlet you are looking for is Add-RDMRoleToUser.

Here is how you can use this cmdlet.

$user = Get-RDMUser -Name "User1"
$role = Get-RDMRole -Name "Group2"
Add-RDMRoleToUser -RoleObject $role -UserObject $user
Set-RDMUser $user

There are some other cmdlets to manage the user's role membership, and also access to vaults.

• Remove-RDMRoleToUser
• Add-RDMRoleVaultAccess
• Get-RDMRoleVaultAccess
• Remove-RDMRoleRepositoryAccess

Let us know if you have further questions.

Best regards,

Thank you!!

One last question: Is it possible to get a list of users in a User group and a list of groups to which a user belongs?

Hello,

No cmdlet is available to get the users within a group or the list of groups a user is a member of.

For custom roles, the IDs of the roles are located in the XML code of the CustomSecurity property of the user object.



Best regards,

For Information, i needed to get User assigned Roles yesterday:

You can get the Groups Names for a User with the follow Code:

$rdm_user = Get-RDMUser | Where {$_.Description -like $user_full_name}
$rdm_user_roles = @()
        [xml]$sec = $rdm_user.CustomSecurity
        foreach ($item in $sec.CustomSecurity.CustomRoles.String)
        {
            $role = Get-RDMRole | where {$_.ID -eq $item}
            $roleName = $role.Name
            if (!([string]::IsNullOrEmpty($roleName)))
            {
                $rdm_user_roles += $roleName
            }
        }
Write-Host $rdm_user_roles

Best Regards Lukas

Hello,

Thank you for sharing your solution with our community.

Best regards,