Deploy profile depending of AD user group

[cazitouni]

Hello,

This isn’t really an issue, but from my understanding it should be possible, with QDT, to deploy a profile to a user based on their Active Directory group. However, I can’t find any documentation explaining how to configure this.

Is there a working example available in a repository somewhere, or am I misunderstanding how this is supposed to work?

Let me know.
Regards,
Clément

[jmkerloch]

You can check the documentation regarding rules for profile deployment.

You can find the conditions that can be used here.

A list of rules like this should work :

"rules": [
    {
      "name": "User in SIG group",
      "description": "Deploy profile only if user in SIG group",
      "conditions": {
        "all": [
          {
            "path": "$.user.groups_local",
            "operator": "in",
            "value": "SIG"
          }
        ]
      }
    }
  ]

Sorry I can't check right now.

If you want to to check your current rules context you can use QDT tool export-rules-context

[Guts]

Hello Clément,

I've juste created an issue related to rules to propose a graphical editor in the Profile Manager plugin: #763. You can find useful informations about rules in it.

[Guts]

Is there a working example available in a repository somewhere, or am I misunderstanding how this is supposed to work?

Sure: https://github.com/qgis-deployment/qgis-deployment-toolbelt-cli/tree/main/examples#only-linux

[cazitouni]

Thanks for the quick answers — it works with a rule using contains.

However, it still creates the directory for the profile and copies the plugins into it; it just doesn’t apply the .ini files or the splash screen. That’s a bit confusing, because it makes it look like the profile actually exists when it doesn’t.

I’m not sure if I missed something in the config or if there’s another issue.