Use the joined_get_user_membership command to have adclient query Active Directory for a list of groups that a specified user belongs to in the domain to which ADEdit’s host computer is joined. If the adclient query returns groups, this command returns those groups in a Tcl list.
Because this command queries Active Directory through adclient, the query might use the adclient cache instead of connecting directly to Active Directory. The adclient cache isn’t guaranteed to be updated with ADedit activity. Therefore, you might need to execute the Centrify UNIX command adflush before using joined_get_user_membership to ensure you get the most up-to-date results.
Zone type
Not applicable
Syntax
joined_get_user_membership user_UPN
Abbreviation
jgum
Options
This command takes no options.
Arguments
This command takes the following argument:
| Argument | Type | Description |
|
user_UPN |
string |
Required. Specifies the user principal name (UPN) of the user to check for group membership. |
Return value
This command returns a Tcl list of groups.
Examples
joined_get_user_membership liz.lemon@acme.com
This example returns group membership for liz.lemon in the joined domain:
acme.com/Users/Domain Users
Related commands
The following commands performs actions related to this command:
- joined_user_in_group checks Active Directory through
adclientto see if a user is in a group. - get_effective_groups returns a Tcl list of groups a user belongs to.
- get_group_members returns a Tcl list of members in a group.
Doc Feedback