Admin Alert Account Status Notification Handler

Note: this component is designated "advanced", which means that objects of this type are not expected to be created or altered in most environments. If you believe that such a change is necessary, you may want to contact support in order to understand the potential impact of that change.

Admin Alert Account Status Notification Handlers provide a way to raise administrative alerts in response to a desired set of account status notification events.

These administrative alerts can be used to identify noteworthy events that user accounts, and especially accounts for users that are high-value targets, like server administrators. For example, this handler can be used to notify administrators whenever a root user's password is updated or if their account is locked (or an alternative lockout action is taken) as a result of too many failed attempts.

This account status notification handler will only have any effect if it is added to one or more password policies. If it is added to a password policy, then administrative alerts will be generated any time a relevant event occurs for any account subject to that password policy.

dsconfig Usage

To list the configured Account Status Notification Handlers:

dsconfig list-account-status-notification-handlers
     [--property {propertyName}] ...

To view the configuration for an existing Account Status Notification Handler:

dsconfig get-account-status-notification-handler-prop
     --handler-name {name}
     [--tab-delimited]
     [--script-friendly]
     [--property {propertyName}] ...

To update the configuration for an existing Account Status Notification Handler:

dsconfig set-account-status-notification-handler-prop
     --handler-name {name}
     (--set|--add|--remove) {propertyName}:{propertyValue}
     [(--set|--add|--remove) {propertyName}:{propertyValue}] ...

To create a new Admin Alert Account Status Notification Handler:

dsconfig create-account-status-notification-handler
     --handler-name {name}
     --type admin-alert
     --set enabled:{propertyValue}
     --set account-status-notification-type:{propertyValue}
     [--set {propertyName}:{propertyValue}] ...

To delete an existing Account Status Notification Handler:

dsconfig delete-account-status-notification-handler
     --handler-name {name}