Delegated Account Management

This AM group is enabling remote account management. Users can belong to multiple

deleteGroup - Delete delegated group

<service name="deleteGroup">
  <info>Delete group/project created by external account manager</info>
  <args>
    <arg isRequired="true" name="group" value="group">
      <info>Project DN to delete</info>
    </arg>
  </args>
</service>

getGroups - Get all delegated groups

<service name="getGroups">
  <info>All known group/project names created by the external authority, with their group admins</info>
  <args>
    <arg isRequired="true" name="group" value="group">
      <info>Group/project DN</info>
    </arg>
  </args>
</service>

changeGroupAdmin - Change the leader of the group

<service name="changeGroupAdmin">
  <info>Change the administrator of the group/project</info>
  <args>
     <arg isRequired="true" name="user" value="user">
       <info>User DN of the new admin</info>
     </arg>
     <arg isRequired="true" name="group" value="group">
       <info>Group/project DN</info>
     </arg>
  </args>
</service>

addUserForm - Show the form for uploading the new user LDIF

<service name="addUserForm">
  <info>Show browser form to upload new user's LDIF</info>
</service>

saveForm - process the new user LDIF

<service name="saveUser">
  <info>Parse uploaded LDIF and create user account</info>
</service>

deleteUser - Delete user

<service name="deleteUser">
  <info>Delete user created by external source</info>
  <args>
    <arg isRequired="true" name="user" value="user">
      <info>User DN to delete</info>
    </arg>
  </args>
</service>

getUsers - Get all users

<service name="getUsers">
  <info>All known remote users with their primary group name</info>
  <args>
    <arg isRequired="false" name="baseDN" value="[baseDN]">
      <info>baseDN</info>
    </arg>
  </args>
</service>

changePrimaryGroup - Change users primary group

<service name="changePrimaryGroup">
  <info>Change user's project</info>
  <args>
    <arg isRequired="true" name="user" value="user">
      <info>User DN</info>
    </arg>
    <arg isRequired="true" name="group" value="group">
      <info>User's new primary group/project DN</info>
    </arg>
  </args>
</service>

addGroupUser - Add user to the secondary group/project

<service name="changePrimaryGroup">
  <info>Change user's project</info>
  <args>
    <arg isRequired="true" name="user" value="user">
      <info>User DN</info>
    </arg>
    <arg isRequired="true" name="group" value="group">
      <info>User's new primary group/project DN</info>
    </arg>
  </args>
</service>

deleteGroupUser - Delete user from the secondary group/project

<service name="deleteGroupUser">
  <info>Delete user from the group/project</info>
  <args>
    <arg isRequired="true" name="user" value="user">
      <info>User DN</info>
    </arg>
    <arg isRequired="true" name="group" value="group">
      <info>Group/project DN</info>
    </arg>
  </args>
</service>