IsReadable

Indicates whether the group profile object in Active Directory is readable for the current user credentials.

Syntax

bool IsReadable {get;}

Property value

Returns true if the GroupUnixProfile object is readable, or false if the object is not readable.

Discussion

This property returns a value of true if the user accessing the group profile object in Active Directory has sufficient permissions to read its properties.

Example

The following code sample illustrates using IsReadable in a script:

...  
set objZone = cims.GetZoneByPath("LDAP://CN=research,
CN=zones,CN=centrify,CN=program data,DC=sierra,DC=com")  
'Identify the Active Directory group  
Set objGroup =
cims.GetGroupByPath("LDAP://CN=testers,CN=groups,DC=sierra,DC=com”)   
'Get the UNIX profile for the group in the zone  
set objGroupUnixProfile = objGroupUnixProfiles.Find(objZone)  
'Check whether the object is readable  
if not objGroupUnixProfile.IsReadable then  
wScript.Echo "Denied read access. Exiting ...."  
wScript.Quit  
else  
wScript.Echo "Read permission granted. Continuing ...."  
wScript.Echo "Group Profile GID: " & objGroupUnixProfile.GID  
end if  
...