Advanced Toolware's Solutions
(UMRA) - User Management Resource Administrator: Download || More Information
(ESSOM) - Enterprise Single Sign-On Manager: Download || More Information
(SSRPM) - Self Service Reset Password Management: Download || More Information
Other Solutions

Some of you out there have asked me "How do I rename a Google Apps User...". In UMRA version before 10.4, the Google Rename action was not available. However, with version 10.4+ you will see in Google -> Users / Groups -> Google Rename User UMRA Action. Now this action is very straight forward in how it works. It accepts 2 inputs, 1 is the %Employeeid% or the username / id etc. of the user you Google Apps you want to update, and 2 is the "New Username".



Now, there is something you want to remember where when using the UMRA Action Google Rename. Most of the time, you will have some type of anchor between either Active Directory and Google Apps, or another system and Google Apps. In most cases, we see our clients use the username(samaccountname) in Active Directory as the Google Apps email name. If you don't update your Active Directory with the new name you use for your Google User, you will loose this "anchor" between the 2. For example, if you hand an account in Active Directory Call joetestuser, and their Google Apps account was also joetestuser, you can make the 1 to 1 correlation. However, if the Google Apps name is not the same as the Active Directory Accounts username, or attribute data, it will be hard to keep track of who’s account in Active Directory or System, is related to an account in Google Apps.

I hope this helps any of you out there who are trying to use the UMRA Action Google Rename. As always, feel free to comment or email if you have any questions.

Advanced Toolware's Solutions
(UMRA) - User Management Resource Administrator: Download || More Information
(ESSOM) - Enterprise Single Sign-On Manager: Download || More Information
(SSRPM) - Self Service Reset Password Management: Download || More Information
Other Solutions

I've had a few clients ask me lately a quick an easy way to use the UMRA Name Generation action outside of the UMRA Create User action. Now, some of you might be asking why, would someone want to do something like this... it's simple, with the More Information Create User action, your already starting the Create User Active Directory action, and it only checks Active Directory for this username. Maybe, you want to check another system, or make sure you never use a username that you've already used in Active Directory before. If you needed to check if you've ever used the generated username before, and you were using the naming generator within the More Information Create User action, it would not check any other system then Active Directory. Now, for some of you this might be perfectly fine, however, for those of you that fall within this workflow process, then this blog post is for you.

Below is a screen show of how to use the UMRA "Generate UserName" action.


So what’s is going on here? Let me explain...
Generate UserName: - This is what generates your username, this is exactly the same as the UMRA Create User Generate Username method, but it wont create the user at the same time.

Check UserName Database - This action will connect to your "source" where you keep your usernames that have already been in use, or even you can check a downstream application. For Example, you can check your HR system, or SIS to see if this username is already in use, and might not yet be in Active Directory.

Get Database Query Rows - After your search of your "source" system, you can now check how many rows were returned from your query.

Check DB Row Count - Now this is the most key action of all the UMRA actions we in this script. What this will do is check the variable you set to hold the Database Row Count. Now if your row count = 0, then we go to "Create User" since we know the username has not yet been used. If the row count =< 1 , you need to go back to "Generate UserName", and thus start the whole process over again.

Create User - If your IF/THEN/ELSE = false then we can create the user account in Active Directory since we know the username is not used / found in your previous Database Query.

Update UserName Database - This action might not be something you would use, however assuming you have some sort of database that hold all the usernames you've used, you would then update that database with the new username that was generated.

So there you have it, a quick and easy way to use the UMRA "Generate UserName" action with an inline loop. Now keep in mind, you can use this "inline loop" method on most of your scripts, however it does make your script less "reusable" since this logic will be contained only in a larger script. Anyways, like always feel free to post comments, or send me a message if you have any questions.

UMRA - The server is unwilling to process the request Advanced Toolware's Solutions
(UMRA) - User Management Resource Administrator: Download || More Information
(ESSOM) - Enterprise Single Sign-On Manager: Download || More Information
(SSRPM) - Self Service Reset Password Management: Download || More Information
Other Solutions

Here is another classic error that I've seen over the years, its the UMRA Error "-5 access denied". Now most of us who design and develop Web Portal / Automation Scripts / or even MASS projects on a daily basis know exactly what this means, however some of our clients might not know exactly what it means of how to fix. Now, just by looking at the UMRA error, it gives you a good idea on what is wrong. However, fixing it can many things depending on when / where you get this error. So take a look below, and I hope this give you a quick fix on your projects.

UMRA Automation
You will most likely see this error in a UMRA Automation script if your trying to connect to a database, or create a home drive etc. that request some type of elevated rights on your network. UMRA Automation by default runs under the umrasvcaccount, and this account should have domain admin rights, however if your UMRA service is running under a different users credentials, then make sure the UMRA service account has the correct rights to these resources. Simple log onto the same machine that is running your UMRA service, as the account that is running the UMRA service, and try to manually connect to the Database, or create a home drive in the network resource area, you should see the windows error "Access Denied".

UMRA MASS
Now, UMRA MASS runs a bit different them UMRA Automation, hence that UMRA MASS runs under the users account who is running the UMRA MASS project. So if you see this error, ensure your account has rights to these network resources.

UMRA Web Portal
If you see this error when you are working with the UMRA COM then check the UMRA Project Security Tab settings on the project. Now, the user will not see the "-5 Access Denied" error message, most likely they will just see a blank page, or a function will not fire off. However, when you look in the UMRA Log directory, you will see the error message there.

So there you have it, a quick and easy way to fix those UMRA -5 Access Denied errors. Like always, if you have any questions, feel free to post, or send me an email.