REBA - FAQs

REBA - FAQs

Who are department administrators?

A department administrator is a user account created via the Department User Tools for and granted membership in one or more Department Adminstrators groups.

  • The Department Administrators group for the EXAMPLE department would be EXAMPLE-Administrators

What are administrative OUs?

Each department in Active Directory has an administrative OU that contains the resources managed by the Department User Tools such as department user accounts and the department's Department Adminstrators group.

  • The canonical name of the Administative OU for the EXAMPLE department would be: austin.utexas.edu/Administrative/Departments/EXAMPLE

  • The distinguished name of the Administative OU for the EXAMPLE department would be OU=EXAMPLE,OU=Departments,OU=Administrative,DC=austin,DC=utexas,DC=edu

How do I submit a request?

A department administrator has two supported methods to submit the request:

  1. run one of the provided PowerShell scripts to both create and submit a request

  2. create a JSON string that contains the required properties for a supported request then submit the request by adding it to the utexasEduAustinMulti1 attribute on an administrative OU

How do I view the results of a request?

A department administrator has two supported methods to submit the request:

  1. run the Get-ADResults.ps1 script view the results of a request

  2. retrieve and parse the values in the utexasEduAustinMulti2 attribute on an administrative OU

What scripts are available to assist with the process?

The Active Directory team maintains a set of PowerShell scripts at https://github.austin.utexas.edu/eis1-aad/RequestsByAttribute to assist department administrators with this process.

The scripts below apply to all request types.

  • Get-ADRequests.ps1 - displays any outstanding requests for a department

  • Get-ADResults.ps1 - displays any completed requests for a department

  • Show-ADRequestValues.ps1 - displays the properties and values supported for each request type

The scripts below apply to specific request types.

  • New-ADDelegationRequest.ps1 - creates and submits a delegation request for a department

  • Remove-ADDelegationRequest.ps1 - removes a pending delegation request from a department