Script repository

The script adds or removes objects from a specific group upon adding or removing them from another group. To execute the script, create a business rule triggering After adding or removing a member from a group. An object will be added or removed from the group specified in the script when added or removed from one of the groups in the Activity Scope of the rule.

In the script, the $targetGroupDN variable specifies the distinguished name (DN) of the group to add or remove members from. For information on how to get an object DN, see Get the DN of a directory object.

$targetGroupDN = "CN=Resources,OU=Groups,DC=example,DC=com" # TODO: modify me

$group = $Context.BindToObjectEx("Adaxes://$targetGroupDN", $True)
if (($Context.Action.IsOperationOfType($Context.TargetObject, "remove group members")) -and
    ($group.IsMember("Adaxes://%member%")))
{
    $group.Remove("Adaxes://%member%")
}
elseif (($Context.Action.IsOperationOfType($Context.TargetObject, "add group members")) -and (-not ($group.IsMember("Adaxes://%member%"))))
{
    $group.Add("Adaxes://%member%")
}