Impersonation - createAutomationPrincipal


Impersonation - createAutomationPrincipal

Description :

This command creates a new automation principal. It assigns the automation principal a name, description, principal identifier (OS specific name or SID), domain name and passphrase. This command returns the handle for the newly created automation principal.

Return type : DBKey

Command Input :

Variable Name

Variable Type

Description

name

String

Name of the automation principal.

description

String

Description of the automation principal.

principal

String

OS specific principal identifier (user name or SID).

domain

String

If the principal is a domain user, specify the domain name. Otherwise, pass in an empty string.

passphrase

String

Passphrase of the principal.

Examples :

Example

The following example creates a generic automation principal for the "CORP/Administrator" user.

Script

Impersonation createAutomationPrincipal CorpDomainAdmin "CORP domain administrator" administrator CORP "p@$$w0rd"



Example

The following example creates an automation principal that represents the credentials required to access an Active Directory server. Note that you need use the principal argument to pass in a fully distinguished name of a privileged LDAP directory user, in this case CN=Administrator,CN=Users,DC=sso,DC=bmc,DC=com.

You can use this command as part of the setup for the Active Directory user synchronization feature. For information about this feature, see the RBAC section of the BMC BladeLogic User Guide (Managing Access).

Script

Impersonation createAutomationPrincipal DirAdmin "LDAP Administrator" CN=Administrator,CN=Users,DC=sso,DC=bmc,DC=com "" "p@$$w0rd"



 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*