Setting up the lab environment

Step 1: Create the database

Execute the following PowerShell code snippet to create the database and its schema. Adjust the ServerName parameter in the New-AcmaDatabase and Connect-AcmaEngine cmdlets as appropriate.

Add-PSSnapin acmacmdlets
New-AcmaDatabase -ServerName localhost -DatabaseName AcmaDemo
Connect-AcmaEngine -ServerName localhost -DatabaseName AcmaDemo

try
{

- Create person attributes

Add-AcmaSchemaAttribute -Name firstName -Type String -IsIndexed $false -IsMultivalued $false -Operation ImportExport
Add-AcmaSchemaAttribute -Name middleName -Type String -IsIndexed $false -IsMultivalued $false -Operation ImportExport
Add-AcmaSchemaAttribute -Name sn -Type String  -IsIndexed $false -IsMultivalued $false -Operation ImportExport
Add-AcmaSchemaAttribute -Name employeeNumber -Type String -IsIndexed $false -IsMultivalued $false -Operation ImportExport
Add-AcmaSchemaAttribute -Name orgUnit -Type Reference -IsIndexed $true -IsMultivalued $false -Operation ImportExport
Add-AcmaSchemaAttribute -Name unixUid -Type Integer -IsMultivalued $false -Operation ImportExport
Add-AcmaSchemaAttribute -Name adminAccount -Type Reference -IsMultivalued $false -Operation ImportOnly
Add-AcmaSchemaAttribute -Name hasAdminAccount -Type Boolean -IsMultivalued $false -Operation ImportExport
Add-AcmaSchemaAttribute -Name orgUnitName -Type String -IsIndexed $false -IsMultivalued $false -Operation ImportExport
Add-AcmaSchemaAttribute -Name manager -Type Reference -IsMultivalued $false -Operation ImportExport
Add-AcmaSchemaAttribute -Name directReports -Type Reference -IsMultivalued $true -Operation ImportExport
Add-AcmaSchemaAttribute -Name displayName -Type String  -IsIndexed $false -IsMultivalued $false -Operation ImportExport
Add-AcmaSchemaAttribute -Name mail -Type String -IsIndexed $false -IsMultivalued $false -Operation ImportExport
Add-AcmaSchemaAttribute -Name accountName -Type String  -IsIndexed $false -IsMultivalued $false -Operation ImportExport
Add-AcmaSchemaAttribute -Name homeFolderPath -Type String  -IsIndexed $false -IsMultivalued $false -Operation ImportExport

- Create OU attributes

Add-AcmaSchemaAttribute -Name ouNumber -Type String -IsIndexed $false -IsMultivalued $false -Operation ImportExport

- Create object classes

Add-AcmaSchemaObjectClass -Name orgUnit -IsUndeletable $false
Add-AcmaSchemaObjectClass -Name person -IsUndeletable $true
Add-AcmaSchemaObjectClass -Name shadowAdminAccount -IsUndeletable $false -ShadowFrom person

- Create orgUnit bindings

Add-AcmaSchemaBinding -Attribute ouNumber -ObjectClass orgUnit
Add-AcmaSchemaBinding -Attribute displayName -ObjectClass orgUnit

- Create person bindings

Add-AcmaSchemaBinding -Attribute firstName -ObjectClass person
Add-AcmaSchemaBinding -Attribute sn -ObjectClass person
Add-AcmaSchemaBinding -Attribute middleName -ObjectClass person
Add-AcmaSchemaBinding -Attribute employeeNumber -ObjectClass person
Add-AcmaSchemaBinding -Attribute orgUnit -ObjectClass person
Add-AcmaSchemaBinding -Attribute unixUid -ObjectClass person
Add-AcmaSchemaBinding -Attribute orgUnitName -ObjectClass person -InheritanceSourceAttribute displayName -InheritanceSourceClass orgUnit -InheritanceSourceReference orgUnit
Add-AcmaSchemaBinding -Attribute manager -ObjectClass person
Add-AcmaSchemaBinding -Attribute displayName -ObjectClass person
Add-AcmaSchemaBinding -Attribute mail -ObjectClass person
Add-AcmaSchemaBinding -Attribute accountName -ObjectClass person
Add-AcmaSchemaBinding -Attribute hasAdminAccount -ObjectClass person
Add-AcmaSchemaBinding -Attribute adminAccount -ObjectClass person
Add-AcmaSchemaBinding -Attribute directReports -ObjectClass person
Add-AcmaSchemaBinding -Attribute homeFolderPath -ObjectClass person

- Create person back links

Add-AcmaSchemaReferenceBackLink -SourceObjectClass person -SourceAttribute manager -TargetObjectClass person -TargetAttribute directReports

- Create shadowAdminAccount bindings

Add-AcmaSchemaBinding -Attribute accountName -ObjectClass shadowAdminAccount
Add-AcmaSchemaBinding -Attribute mail -ObjectClass shadowAdminAccount
Add-AcmaSchemaBinding -Attribute displayName -ObjectClass shadowAdminAccount
Add-AcmaSchemaBinding -Attribute firstName -ObjectClass shadowAdminAccount -InheritanceSourceAttribute firstName -InheritanceSourceClass person -InheritanceSourceReference shadowParent
Add-AcmaSchemaBinding -Attribute middleName -ObjectClass shadowAdminAccount -InheritanceSourceAttribute middleName -InheritanceSourceClass person -InheritanceSourceReference shadowParent
Add-AcmaSchemaBinding -Attribute sn -ObjectClass shadowAdminAccount -InheritanceSourceAttribute sn -InheritanceSourceClass person -InheritanceSourceReference shadowParent
Add-AcmaSchemaBinding -Attribute employeeNumber -ObjectClass shadowAdminAccount -InheritanceSourceAttribute employeeNumber -InheritanceSourceClass person -InheritanceSourceReference shadowParent

- Create constants

Add-AcmaConstant -Name homeFolderPathRoot -Value '%temp%\acmausers'
Add-AcmaConstant -Name mailSuffix -Value 'acma-demo.com'

- Create sequences

Add-AcmaSequence -Name homeFolderGroup -StartValue 1 -IncrementBy 1 -MinValue 1 -MaxValue 10
Add-AcmaSequence -Name unixUid -StartValue 20000 -IncrementBy 1

- Create shadow links

Add-AcmaShadowObjectLink -Name adminAccount -ReferenceAttribute adminAccount -ProvisioningAttribute hasAdminAccount -ShadowObjectClass shadowAdminAccount

}
catch
{
    $_.Exception.ToString();
    throw;
}

Step 2: Create sample data

Now that the database has been setup, we can create some users and org unit object. Please adjust the path in the PowerShell script below to the appropriate location for your test environment.

Connect-AcmaEngine -ServerName localhost -DatabaseName AcmaDemo -ConfigFile "C:\ACMADemo\acma-demo.acmax" -LogFile "C:\ACMADemo\demo.log" -LogLevel Debug

$orgUnit1 = Add-AcmaObject -ObjectClass orgUnit
$orgUnit1.Attributes["displayName"] = "Finance"
$orgUnit1.Attributes["ouNumber"] = 2001
$orgUnit1.Commit()

$orgUnit2 = Add-AcmaObject -ObjectClass orgUnit
$orgUnit2.Attributes["displayName"] = "IT"
$orgUnit2.Attributes["ouNumber"] = 2002
$orgUnit2.Commit()

$orgUnit3 = Add-AcmaObject -ObjectClass orgUnit
$orgUnit3.Attributes["displayName"] = "Sales"
$orgUnit3.Attributes["ouNumber"] = 2003
$orgUnit3.Commit()

$person1 = Add-AcmaObject -ObjectClass person
$person1.Attributes["firstName"] = "John"
$person1.Attributes["sn"] = "Smith"
$person1.Attributes["employeeNumber"] = 1000
$person1.Attributes["orgUnit"] = $orgUnit2
$person1.Commit();

$person2 = Add-AcmaObject -ObjectClass person
$person2.Attributes["firstName"] = "William"
$person2.Attributes["sn"] = "Keys"
$person2.Attributes["employeeNumber"] = 1001
$person2.Attributes["orgUnit"] = $orgUnit3
$person2.Attributes["manager"] = $person1
$person2.Commit();

$person3 = Add-AcmaObject -ObjectClass person
$person3.Attributes["firstName"] = "William"
$person3.Attributes["middleName"] = "John"
$person3.Attributes["sn"] = "Keys"
$person3.Attributes["employeeNumber"] = 1002
$person3.Attributes["orgUnit"] = $orgUnit1
$person3.Attributes["manager"] = $person1
$person3.Commit();

$person4 = Add-AcmaObject -ObjectClass person
$person4.Attributes["sn"] = "Stewart"
$person4.Attributes["employeeNumber"] = 1003
$person4.Attributes["orgUnit"] = $orgUnit3
$person4.Attributes["manager"] = $person1
$person4.Commit();

$person5 = Add-AcmaObject -ObjectClass person
$person5.Attributes["firstName"] = "William"
$person5.Attributes["sn"] = "Keys"
$person5.Attributes["employeeNumber"] = 1004
$person5.Attributes["orgUnit"] = $orgUnit1
$person5.Attributes["manager"] = $person1
$person5.Commit();

Next step: Evaluating the business rules

Previous step: Lab environment definition