AddGroupPartialProfile

Adds a computer-specific partial profile for the specified group to the computer.

Syntax

IHierarchicalGroup AddGroupPartialProfile(DirectoryEntry groupDE)

IHierarchicalGroup AddGroupPartialProfile(SearchResult groupSR)

IHierarchicalGroup AddGroupPartialProfile(string groupDn)

IHierarchicalGroup AddGroupPartialProfile(IAdsGroup groupIAds)

Parameters

Specify one of the following parameters when using this method.

Parameter	Description
groupDE	The directory entry for the group for which you want a partial profile.
groupSr	The directory entry for a group specified as a search result.
groupDn	The group specified as a distinguished name.
groupIads	The IADs interface to the group.

Return value

The hierarchical group object that represents the group profile.

Discussion

When you assign computer-level overrides for user, group, or computer role assignments, IBM Security creates a computer zone, which is a special type of zone that contains the users, groups, and computer role assignments that are specific to only that one computer. Computer zones are not exposed as zones in Access Manager.

This method creates a computer zone and a new group profile with values set for the Cims and User properties. You can then add other properties to the profile.

The profile is not stored in Active Directory until you call the Commit method.

The AddGroupPartialProfile(DirectoryEntry groupDE) and AddGroupPartialProfile(SearchResult groupSr) methods are available only for .NET-based programs.

Exceptions

If you pass a null or empty parameter, AddGroupPartialProfile throws the exception ArgumentNullException.

Example

The HierarchicalZoneComputer.AddGroupPartialProfile method is used in the same way as the HierarchicalZone.AddGroupPartialProfile method. See AddGroupPartialProfile for an example.