Sparx Systems Forum
Enterprise Architect => Automation Interface, Add-Ins and Tools => Topic started by: Yehuda on March 25, 2010, 03:52:03 am
-
Hi,
Is there a way to synchronize EA with Active directory group(s)?
i.e. - When a user is added to A.D. group it will automatically be previlidged with EA security permitions (according to his group)?
I have notice the improt option - can it be invoked using the automation Model, in order to achieve this synchronization?
Can users be deleted from EA security group by automation/
Thanks in advance,
Yehuda
-
I haven't found anything in the API to manage security users.
If you really need to you can ofcourse edit the database directly, but that should be considered a last resort.
Geert
-
Thanks Greet for your reply. I think that I'll keep using the Version control based permissions for now.
Managing additinal user groups in EA requires too much maintenance.
Yehuda
-
Hiyas,
Any chance this can be done now... nearly seven years later?
Cheers, Donna.
-
Hiyas,
Any chance this can be done now... nearly seven years later?
Cheers, Donna.
If you have an Identity Management solution chances are there's an API call that will create a user.
It's not really the role of EA to become an IAM.
-
Hello Donna,
Although AD groups can be used to control access to licenses, they can't be used to manage project access.
But I can't help thinking it should be doable. In fact I've got some ideas on how it could be achieved, but it would mean some restrictions on how you deploy your EA projects.
It would also require a greater development effort than I'm prepared to take on as a one-man EA consultant. But if there's a potential customer out there this is one of those things I'd love to get stuck into. The un-enterprise-iness is one of my pet peeves with EA, and an effective AD integration would go a fair way towards resolving that.
/Uffe
-
Hello Donna,
Although AD groups can be used to control access to licenses, they can't be used to manage project access.
But I can't help thinking it should be doable. In fact I've got some ideas on how it could be achieved, but it would mean some restrictions on how you deploy your EA projects.
It would also require a greater development effort than I'm prepared to take on as a one-man EA consultant. But if there's a potential customer out there this is one of those things I'd love to get stuck into. The un-enterprise-iness is one of my pet peeves with EA, and an effective AD integration would go a fair way towards resolving that.
/Uffe
(My emphasis)
You and a pile of us! But then, as we know, we live in a post-truth environment where words no longer mean anything.
Paolo
-
In think currently you can actually assign an AD group to a EA security group can't you?
I haven't actually used it, but at the group level there's a checkbox "link to Active Directory" and there is a Sync button that I suppose will synchronize the EA users with the AD users of that group.
Geert
-
It would also require a greater development effort than I'm prepared to take on as a one-man EA consultant. But if there's a potential customer out there this is one of those things I'd love to get stuck into. The un-enterprise-iness is one of my pet peeves with EA, and an effective AD integration would go a fair way towards resolving that.
Be very careful what you wish for.
-
Anyone found a solution to synchronize EA acces rights with Active directory group(s)?
The AD-link flag in EA is not covering this request.
thxs
-
if you are using the latest version (14.1.1427) this should work.
Geert
-
if you are using the latest version (14.1.1427) this should work.
Geert
Hmm, as I read you can only import users from a Active directory group manually :(
https://sparxsystems.com/enterprise_architect_user_guide/14.0/team_support/import_user_ids_from_active_di.html
Cant find any new doc for EA v 14.1
-
I don't remember exactly how you do it, but we discussed it in this forum a while ago.
I do remember that it was not exactly the most intuitive way.
Geert
-
Update:
I should have read the history of Changes and fixes for Build 1427. (https://sparxsystems.com/products/ea/history.html (https://sparxsystems.com/products/ea/history.html))
•Added option to automatically maintain the list of available users based on Windows Active Directory or OpenID groups
We are also trying to make this works. We are using version 14.0.1423 and when I look at the "Security Users" screen it doesn't match the documentation.
The documentation has more options such as:
- Allow 'Remember Me'
- Accept OpenID Authentification
- Restrict access to Windows & OpenID user only
- Automatically create or modify Windows or OpenID users
When I read the documentation, I thought that by enabling the option "Automatically create or modify Windows or OpenID users", the EA group would be kept in synch with Active Directory groups.
Unfortunately, I don't have the option so I cannot try it. Anybody has the latest version? Are these options available?
-
Yes, in version 14.1.1428 these options are present.
I haven't used them yet though
Geert
-
Related to history of Changes and fixes for Build 1427. (https://sparxsystems.com/products/ea/history.html)
Still no API to make this synchronization automatic vs manually pushing a button every time?
Can't find any.
-
There's no API for it, but the Configure Users dialog provides the same effect without needing to call an API. Automatically create or modify Windows or OpenID users (https://sparxsystems.com/enterprise_architect_user_guide/15.0/team_support/single_sign_on_options.html)