Skip to main content

ADInventory: Custom Attributes

Use the Custom Attributes page to add Active Directory attributes that are unique to your environment or that Access Analyzer doesn't collect by default. This wizard page appears for the Scan Active Directory category.

The Standard Reference Tables & Views for the ADInventory Data Collector topic provides information on what is collected by default. Custom attributes added on this page are stored in the SA_ADInventory_ExtendedAttributes table.

Active Directory Inventory DC Wizard Custom Attributes page

The Custom Attribute is defined according to the following three elements:

  • Domain Filter – Short or fully qualified name
  • Object Class – User, Group, or Computer
  • Attribute Name – As listed within Active Directory

Use the Add, Edit, and Remove buttons at the bottom of the window to configure the custom attributes for the scan to gather. See the Manually Add Custom Attributes topic for additional information.

The Import button opens the Custom Attributes Import Wizard. See the Custom Attributes Import Wizard topic for additional information.

For details on the Microsoft Active Directory Schema, see the Microsoft Active Directory Schema article.

Manually Add Custom Attributes​

The Add and Edit buttons on the Custom Attributes page open the Custom Attribute window. To manually add custom attributes:

Step 1 – On the Custom Attributes page of the Active Directory Inventory DC Wizard, click Add. The Custom Attribute window opens.

Custom Attribute window

Step 2 – Enter the Domain Filter as either the short domain name or the fully qualified domain name.

Step 3 – Select the checkbox for the Object Class you want.

Step 4 – Enter the Attribute Name as it appears in Active Directory.

Step 5 – Click OK. The Custom Attribute window closes and adds the specified attribute to the Custom Attributes page.

Repeat this process until you've added all the custom attributes you want.

Custom Attributes Import Wizard​

The Custom Attributes Import Wizard imports a list of custom attributes into the ADInventory Data Collector configurations. To use the Custom Attributes Import Wizard:

Step 1 – On the Custom Attributes page of the Active Directory Inventory DC Wizard, click Import. The Custom Attribute Import Wizard opens.

Custom Attributes Import Wizard Credentials page

Step 2 – On the Credentials page, identify a domain either by entering one manually or selecting one from the Domain Name dropdown menu, which displays a list of domains that the domain hosting the Access Analyzer Console server trusts. Then set the credentials for reading the attributes list from the domain:

  • Authenticate as the logged in user – Applies the user account running Access Analyzer
  • Use the following credentials to authenticate – Applies the account you supply in the User Name and Password fields

Click Next to continue.

Custom Attributes Import Wizard Attributes page

Step 3 – The wizard populates available attributes from the domain you specify on the Attributes page. Expand the object class you want and select the checkboxes for the custom attributes to import. Then click Next.

Custom Attributes Import Wizard Summary page

Step 4 – On the Summary page, click Finish.

The wizard adds the selected attributes to the Custom Attributes page of the Active Directory Inventory DC Wizard.