HierarchicalZoneComputer

The HierarchicalZoneComputer class represents a computer joined to a hierarchical zone.

Syntax

public interface IHierarchicalZoneComputer : IComputer

Discussion

The HierarchicalZoneComputer class inherits many methods and properties from the Computer class, but adds support for partial profiles and inheritable roles. Under hierarchical zones, both identity (profile data) and access (authorization data) are inherited, such that a computer’s effective identity or access are determined by all the profile data and all the access data at all levels of the hierarchy.

See HierarchicalUser for a discussion of profile and access inheritance.

When you assign computer-level overrides for user, group, or computer role assignments, IBM Security creates a computer zone, which is a special type of zone that contains the users, groups, and computer role assignments that are specific to only that one computer. Computer zones are not exposed as zones in Access Manager, but are referred to in the method and property descriptions where appropriate.

Methods

The HierarchicalZoneComputer class provides the following methods:

Method	Description
`AddAccessGroup`	Adds a group to the computer.
`AddGroupPartialProfile`	Adds a computer-specific partial profile for a specified group.
`AddLocalGroupPartialProfile`	Adds a computer-specific partial profile for a specified local group.
`AddLocalUserPartialProfile`	Adds a computer-specific partial profile for a specified user.
`AddRoleAssignment`	Adds an empty role assignment.
`AddUserPartialProfile`	Adds a computer-specific partial profile for a specified user.
`Commit`	Commits changes to the group object to Active Directory. (Inherited from `Computer`.)
`CreateImportPendingGroup`	Creates a pending imported group in this computer.
`CreateImportPendingUser`	Creates a pending imported user in this computer.
`Delete`	Deletes the computer profile from Active Directory. (Inherited from `Computer`.)
`DeleteAllProfiles`	Deletes all computer-specific users and groups.
`DeleteZone`	Deletes the computer zone object if it exists.
`GetAccessGroup`	Returns a group given a role for the group.
`GetAccessGroups`	Returns an enumeration of groups in the computer object.
`GetDirectoryEntry`	Returns the Active Directory object for the computer. (Inherited from `Computer`.)
`GetEffectiveUserUnixProfiles`	Returns an enumeration of effective users under this computer zone.
`GetGroupUnixProfile`	Returns the UNIX group profile in this computer zone for the specified Active Directory group.
`GetGroupUnixProfileByDN`	Returns the UNIX group profile in this computer zone for the Active Directory group specified by distinguished name.
`GetGroupUnixProfileByName`	Returns the UNIX group profile in this computer zone for the Active Directory group specified by group name.
`GetGroupUnixProfiles`	Returns an enumeration of the UNIX groups in this computer zone.
`GetImportPendingGroup`	Returns the group with the specified ID pending import.
`GetImportPendingGroups`	Returns an enumeration of groups pending import to this computer zone.
`GetImportPendingUser`	Returns the user with the specified ID pending import.
`GetImportPendingUsers`	Returns an enumeration of users pending import to this computer zone.
`GetIPendingGroupID`	Returns the numeric identifier for the pending import group with the specified group name.

method	Description
`GetLocalGroupUnixProfile`	Returns the local UNIX group profile for a specified group name in the zone.
`GetLocalUserUnixProfileByDN`	Returns a local group profile using the distinguished name (DN) of the profile.
`GetLocalGroupUnixProfileByGid`	Returns the local group profile using the Group Identifier (GID). This method is exposed to the .COM interface.
`GetLocalGroupUnixProfiles`	Returns a list of the local group profiles in the zone.
`GetLocalUserUnixProfile`	Returns the local user profile using the specified user name.
`GetLocalUserUnixProfileByDN`	Returns the local user profile specified by the distinguished name (DN) of the profile.
`GetLocalUserUnixProfileByUid`	Returns the local user profile using the User Identifier (UID). This method is exposed to the .COM interface
`GetLocalUserUnixProfiles`	Returns a list of the local user profiles in the zone.
`GetIPendingUserID`	Returns the numeric identifier for the pending import user with the specified user name.
`GetNssVariable`	VBScript interface to access NSS variables.
`GetNSSVariables`	VBScript interface to obtain all NSS variable names.
`GetPrimaryUser`	Returns the primary profile for the specified user.
`GetRoleAssignment`	Returns the role assignment for the specified role and trustee.
`GetRoleAssignmentById`	Returns the role assignment for the specified GUID.
`GetRoleAssigments`	Returns the collection of role assignments in the computer.
`GetRoleAssignmentToAllADUsers`	Returns the role assignment given to all Active Directory users who have a specified role.
`GetRoleAssignmentToAllUnixUsers`	Returns the role assignment given to all UNIX users who have a specified role.
`GetSecondaryUsers`	Returns an enumeration of the secondary profiles for the specified user.
`GetUserProfiles`	Returns an enumeration of all the user profiles for the specified user.
`GetUserRoleAssignments`	Returns an enumeration of all the user role assignments in this computer zone.
`GetUserUnixProfile`	Returns the UNIX user profile in this computer zone for the specified user.
`GetUserUnixProfileByDN`	Returns the UNIX user profile in this computer zone for the user specified by distinguished name.
`GetUserUnixProfileByName`	Returns the UNIX user profile in this computer zone for the user specified by user name.
`GetUserUnixProfileByUid`	Returns the UNIX user profile in this computer zone for the user specified by UID.
`GetUserUnixProfiles](getuserunixprofiles.md) \| Returns an enumeration of all the UNIX user profiles in this computer zone. \| \| [`GroupUnixProfileExists`](groupunixprofileexists.md) \| Indicates whether the group has a profile in this computer zone. \| \| [`LocalGroupUnixProfileExists`](localgroupunixprofileexists.md) \| Indicates whether a UNIX profile exists in the zone for the specified local group. \| \| [`LocalUserUnixProfileExists`](localuserunixprofileexists.md) \| Indicates whether a UNIX profile exists in the zone for the specified local user. \| \| [`Refresh`](../computer/refresh.md) \| Refreshes the data in this object instance from the data stored in Active Directory. (Inherited from [`Computer`](../computer/index.md).) \| \| [`SetNSSVariable`](setnssvariable.md) \| VBScript interface to set the values of NSS variables. \| \| [`UserUnixProfileExists`	Indicates whether the specified user has a profile in this computer zone.

Properties

The HierarchicalZoneComputer class provides the following properties:

Property	Description
`AdsiInterface`	Gets the IADs interface of the zone object in Active Directory. (Inherited from `Computer`.)
`ADsPath`	Gets the LDAP path to the zone object. (Inherited from `Computer`.)
`AgentVersion`	Gets the Active Directory client version number. (Inherited from `Computer`.)
`CanonicalName`	Gets the canonical name of the computer object. (Inherited from `Computer`.)
`ComputerZoneADsPath`	Gets the LDAP path of the computer zone object.
`IsOrphan`	Indicates whether the CIMs data associated with this object is orphaned by the current credentials. (Inherited from `Computer`.)
`IsOrphanZone`	Indicates whether this computer is an orphan zone object.
`IsReadable`	Indicates whether the CIMS data associated with this object is readable with the current user credentials. (Inherited from `Computer`.)
`IsWritable`	Indicates whether the CIMS data associated with this object is writable with the current user credentials. (Inherited from `Computer`.)
`JBossEnabled`	Determines whether the computer is enabled for JBoss. (Inherited from `Computer`.)
`Name`	Gets or sets the name of the computer object. (Inherited from `Computer`.)
`NssVariables`	Gets the map of profile variables.
`ProfileADsPath`	Gets the LDAP path to the computer UNIX profile. (Inherited from `Computer`.)
`SchemaVersion`	Gets the version of the data schema. (Inherited from `Computer`.)
`TomcatEnabled`	Determines whether the computer is enabled for Tomcat. (Inherited from `Computer`.)
`UserHomeDirectory`	Gets or sets the UNIX directory path that is used to substitute for %{home} in user profiles.
`UserShell`	Gets or sets the shell that is used to substitute for `%{shell}`in user profiles.
`Version`	Gets the version number of the data schema. (Inherited from `Computer`.)
`WebLogicEnabled`	Determines whether the computer is enabled for WebLogic. (Inherited from `Computer`.)
`WebSphereEnabled`	Determines whether the computer is enabled for WebSphere. (Inherited from `Computer`.)
`Zone`	Gets or sets the zone that this computer joins.
`ZoneMode`	Gets the zone mode of the computer. (Inherited from `Computer`.)