IsReadable

Indicates whether the group profile object in Active Directory is readable for the current user credentials.

Syntax

bool IsReadable {get;}

Property value

Returns true if the GroupUnixProfile object is readable, or false if the object is not readable.

Discussion

This property returns a value of true if the user accessing the group profile object in Active Directory has sufficient permissions to read its properties.

Example

The following code sample illustrates using IsReadable in a script:

...
set objZone = cims.GetZoneByPath("LDAP://CN=research, CN=zones,CN=centrify,CN=program data,DC=sierra,DC=com")
'Identify the Active Directory group
Set objGroup = cims.GetGroupByPath("LDAP://CN=testers,CN=groups,DC=sierra,DC=com”) 
'Get the UNIX profile for the group in the zone
set objGroupUnixProfile = objGroupUnixProfiles.Find(objZone)
'Check whether the object is readable
if not objGroupUnixProfile.IsReadable then
   wScript.Echo "Denied read access. Exiting ...."
   wScript.Quit
else
   wScript.Echo "Read permission granted. Continuing ...."
   wScript.Echo "Group Profile GID: " & objGroupUnixProfile.GID
end if
...