joined_get_user_membership

Use the joined_get_user_membership command to have adclient query Active Directory for a list of groups that a specified user belongs to in the domain to which ADEdit’s host computer is joined. If the adclient query returns groups, this command returns those groups in a Tcl list.

Because this command queries Active Directory through adclient, the query might use the adclient cache instead of connecting directly to Active Directory. The adclient cache isn’t guaranteed to be updated with ADedit activity. Therefore, you might need to execute the Centrify UNIX command adflush before using joined_get_user_membership to ensure you get the most up-to-date results.

Zone type

Not applicable

Syntax

joined_get_user_membership user_UPN

Abbreviation

jgum

Options

This command takes no options.

Arguments

This command takes the following argument:

Argument	Type	Description
user_UPN	string	Required. Specifies the user principal name (UPN) of the user to check for group membership.

Return value

This command returns a Tcl list of groups.

Examples

joined_get_user_membership liz.lemon@acme.com

This example returns group membership for liz.lemon in the joined domain:

acme.com/Users/Domain Users

Related commands

The following commands performs actions related to this command:

• joined_user_in_group checks Active Directory through adclient to see if a user is in a group.
• get_effective_groups returns a Tcl list of groups a user belongs to.
• get_group_members returns a Tcl list of members in a group.