UI Path Active Directory Group Integration

rohan.s.powar · October 19, 2017, 6:16am

Hi All,

Have a quick critical query related to UI Path with Active Directory Integration.

One of the US client is looking to implement one UI Path Orchestrator instance supporting multiple LOB processes (Multi Tenancy within LOB). The ask from the client is to assign permission in Orchestrator to different Processes, Credentials Vault,
Asset Manager on the basis of Active Directory Group and not only AD user. The client is looking to implement 400 + Processes hence this feature is very much required otherwise Maintenance would be a big effort.

Please suggest if UI Path Orchestrator supports syncing AD Group & Sub Groups (Automatically) and also allows to assign permission at AD Group level for different Processes, Credentials Etc. Any video or KB article would be helpful as well.

Sincerely,
Rohan Powar

govind · November 10, 2017, 7:09am

Hi rohan, i think this is related to your query

fraydex · April 20, 2018, 7:25am

That does not answer the question, does it?

Is there an option to automaticaly sync the AD(-Groups) to Orchestrator. The key is automated syncing not user-auto-login!

sai.kiran · June 8, 2018, 3:57am

Active directory users import check if this helps .

madhur_vashisht · November 30, 2018, 8:33pm

Hi @fraydex Please try using this Powershell script:

github.com

UiPath/orchestrator-powershell/blob/master/Examples/Sync-UiPathADUsers.ps1

<#
    .SYNOPSIS
        Synchronises Orchestrator users with Windows or Azure Active Directory, based on AD group membership mapped to Orchestrator Roles.
    .DESCRIPTION
        New users in AD are added to Orchestrator and existing users added moved to the correct Role.
        Azure AD users are matched by comparing the Azure AD user principal name with the user Email in Orchestrator.
        The script also handles removing Orchestrator users from roles when they were removed from the corresponding AD group.
        AD users that were removed from all relevant AD groups (eg. an employee that changed role) or were removed from AD (eg. a former employee that left the company) become 'orphaned users'. They are still defined in Orchestrator but do not have any Role. The script supports the -OrphanedUsersAction parameter allowing to optionally List or Remove these users.
        The script is idempotent, repeated invocations should not modify the Orchestrator users unless something changed in AD.
        You should first import the UiPath.PowerShell module and authenticate yourself with your Orchestrator using Get-UiPathAuthToken before running this script.
        The script does not modify the Admin user roles membership, even if the Email matches the AzureAD domains. This is a common scenario and can result in accidentally locking Admin user out of Administrators group.
        The script adds new Orchestrator users using the Azure AD DisplayName as Name and leaves Surname empty. It does not try to split the DisplayName and figure out the Surname.
    .PARAMETER DomainName
        The Windows domain to sync users with. It does not necessarily has to be your current user or machine domain, but there must be some trust relationship so your Windows session can discover and interogate this domain AD.
    .PARAMETER AzureAD
        Use currently connected Azure AD for sync. You must first connect the PowerShell session to Azure AD using Connect-AzureAD
    .PARAMETER RolesMapping
        A Hashtable mapping AD groups to Orchestrator roles. Make sure you type the names correctly.
    .PARAMETER OrphanedUsersAction
        Optional action to handle orphaned users. You can List or Remove these users.

This file has been truncated. show original

fraydex · December 10, 2018, 1:53pm

Thanks

Prajakta23 · July 11, 2019, 6:14am

Hi @madhur_vashisht , I am working on this script, but I am facing few errors as active directory service not running while executing few commands such as get-adgroup to filter out available list of AD.
I am importing the users with same AD forest and has read privileges as well. Still facing the issue.

Can you provide your comments on same?

Topic		Replies	Views
UiPath Powershell script error - To sync up AD group Automation Cloud orchestrator , question	1	1815	July 22, 2019
Proper AD/LDAP Integration Orchestrator orchestrator , completed	14	7412	October 14, 2020
UI Path Active Directory Group Integration -Orchestrator Help orchestrator	0	1432	July 10, 2019
Orchestrator - Active Directory - Domain Orchestrator	7	4712	March 29, 2023
AAD integration with Uipath Apps executing Unattended workflows Apps	1	874	February 8, 2022

Most Active Users - Yesterday
Anil_G
ashokkarale
jinal.shah
Gautham_Pattabiraman
postwick
chandreshsinh.jadeja
vrdabberu
Ajay_Mishra
sven.wullum1
Vyshnavi_Nalumachu
More details...

UI Path Active Directory Group Integration

Related Topics