MetabaseSecuritySubjectUpdateType

Description

The MetabaseSecuritySubjectUpdateType enumeration contains methods for updating repository users. It is used by the following properties and methods:

Available Values

Value	Brief description
0	None. Do not update.
1	DBGrant. Grant permissions on DB server in accordance with permissions on repository objects.
2	DBCreate. Create a user on DB server.
3	DBGrantCreate. Create a user on DB server and grant permissions on server in accordance with permissions on repository objects.
4	LDAPSync. Synchronize domain user attributes with LDAP directory attributes.

Comments

When the LDAPSync value is used, during attribute synchronization, domain users are renamed at DBMS level by the SamAccountName or UserPrincipalName attribute, depending on the value of the USEUPN attribute in the Metabases.xml file.

Renaming of domain users is available only in PostgreSQL DBMS if the following conditions are satisfied:

In the LDAP directory the value of the attribute mapped with user name (value of the Name attribute) has changed in the settings.xml file.
The domain user is not connected from server.
Built-in authorization is not used.

To determine the credentials that will be used to rename user at DBMS level, use the ILogonSession.Credentials property.

Synchronization is executed during user update using the IMetabaseSecurity.CreateUsersUpdate, IMetabaseSecurity.UpdateUsers methods if value of the MetabaseSecuritySubjectUpdateType.LDAPSync enumeration is set in the IMetabaseUsersUpdate.ItemSetup property. To add a domain user to update, use the IMetabaseUsersUpdate.Add method.

Synchronization of domain user attributes is given in the example for IMetabaseUsersUpdate.ItemSetup.