Indicates whether the group profile object in Active Directory is writable for the current user’s credentials.


bool IsWritable {get;}

Property value

Returns true if the GroupUnixProfile object is writable, or false if the object is not writable.


This property returns a value of true if the user accessing the group profile object in Active Directory has sufficient permissions to change the group profile object’s properties.


The following code sample illustrates using IsWritable in a script:

set objZone = cims.GetZoneByPath("LDAP://CN=research,CN=zones,CN=centrify,CN=program data,DC=sierra,DC=com")
'Identify the Active Directory group
Set objGroup = cims.GetGroupByPath("LDAP://CN=testers,CN=groups,DC=sierra,DC=com”) 
'Get the UNIX profile for the group in the zone
set objGroupUnixProfile = objGroupUnixProfiles.Find(objZone)
'Check whether the object is writable
if not objGroupUnixProfile.IsWritable then
   wScript.Echo "Denied write access. Exiting ...."
   wScript.Echo "Write permission granted. Continuing ...."
   wScript.Echo "Group Profile GID: " & objGroupUnixProfile.GID
end if