IsReadable
Indicates whether the group profile object in Active Directory is readable for the current user credentials.
Syntax
bool IsReadable {get;}
Property value
Returns true if the GroupUnixProfile object is readable, or false if the object is not readable.
Discussion
This property returns a value of true if the user accessing the group profile object in Active Directory has sufficient permissions to read its properties.
Example
The following code sample illustrates using IsReadable in a script:
... set objZone = cims.GetZoneByPath("LDAP://CN=research, CN=zones,CN=centrify,CN=program data,DC=sierra,DC=com") 'Identify the Active Directory group Set objGroup = cims.GetGroupByPath("LDAP://CN=testers,CN=groups,DC=sierra,DC=com”) 'Get the UNIX profile for the group in the zone set objGroupUnixProfile = objGroupUnixProfiles.Find(objZone) 'Check whether the object is readable if not objGroupUnixProfile.IsReadable then wScript.Echo "Denied read access. Exiting ...." wScript.Quit else wScript.Echo "Read permission granted. Continuing ...." wScript.Echo "Group Profile GID: " & objGroupUnixProfile.GID end if ...