Automate users assigned to RADIUS profile

[Michiel]

Hello,

I have about 150 existing RSA Authentication Manager 8.2 users who need to be assigned a RADIUS profile. I was wondering whether anyone knows whether or not this task could be automated (and if so, how)? I don't have any AMBA experience but I quickly read the documentation and could find anything mentioning automation of this specific task.

Next to AMBA, would there be any other ways to get this done? We're running AM v8.2 P3. Thanks in advance! Best regards,

Michiel

[EdwardDavis · Accepted solution]

AMBA can do it.

Most basic example here.

user named admin and I have a radius profile called PA-PROFILE

So, the simplest thing is assign a profile to a userid

a) My AMBA input file

profile.csv

action,DefLogin,ProfileName
AP,admin,PA-PROFILE

b) My AMBA launch command (with debug) 

 ./rsautil AMBulkAdmin  -a superadmin -P support1! --verbose -m 0 -i profile.csv

c) Result: admin now has radius profile PA-PROFILE assigned

amba log file

Info : Line 1 -Header Line
Info : -Entering assignProfile
Info : -Default subdomain value set to :: true
Success: 2017-01-11 10:32:42 : Line 2 - assignProfile -admin, PA-PROFILE
Info : -Leaving assignProfile
Info : -Closing input file
Info : -Closing rejected actions file
Info : -Closing unsupported actions file
Info : -Log File Closed
Info : -Exit code: 0
EOJ : 2017-01-11 10:32:42 - Terminating

[Michiel]

Great, thanks a lot for your quick follow up!!

[_EricaChalfin]

Michiel Simon‌,

Take a look at the Assign Profile (AP) command on page 52 of the RSA Authentication Manager 8.2 Bulk Administration 1.6.0 Custom Application Guide.

Regards,

Erica

[EdwardDavis]

Another way to do it is in the Security Console, on the list of users you

can select the users you want and use the top dropdown to assign a radius profile

to all who have checkmarks

[Michiel]

Thanks for the help all - very useful information. I had also overlooked the option of using the multi-select feature in the GUI so definitely nice to be able to have helpdesks use that option. Cheers!