REBA - Technical Details

The Requests By Attribute process is comprised of the following parts: the request string, the requests attribute, the request script, the request task, the result string, the results attribute.

• The request string is a JSON string that contains the required properties and values for the request. A department administrator creates the JSON string manually or via a PowerShell script published by the Active Directory team.

• The requests attribute is the multi-valued attribute on a department's Administrative OU that contains any pending requests strings. A department administrator adds the request string to the requests attribute to submit the request. The attribute can contain multiple request strings.

  • The utexasEduAustinMulti1 attribute has been defined as the requests attribute.

  • The members of the department's Department Administrators group can read and write the attribute to submit or cancel requests for processing.

• The request script is the PowerShell script that processes the requests and performs the requested actions. The request script removes the request string from the requests attribute when processing a request.

• The request task is the scheduled task that starts the request script every hour. The request task can be run manually by the Active Directory to expedite a request.

• The result string is a JSON string that contains the results of processing the request along with the original request string. The request process creates the result string and appends any errors encountered during processing to the result string.

• The results attribute is the multi-valued attribute on a department's Administrative OU that contains any result strings. The request process adds the result string to the results attribute to report the outcome of the request to the department.

  • The utexasEduAustinMulti2 attribute has been defined as the results attribute.

  • The members of the department's Department Administrators group can read the attribute to review the results of any processed requests.

The Requests By Attribute process is centered around each department's Adminstrative OU. Each department in Active Directory has an Administrative OU that contains the resources managed by the Department User Tools such as department user accounts and the department's Department Adminstrators group.

• The distinguished name of the Administative OU for the EXAMPLE department would be: OU=EXAMPLE,OU=Departments,OU=Administrative,DC=austin,DC=utexas,DC=edu

• The name of the Department Administrators group for the EXAMPLE department would be: EXAMPLE-Administrators