Using LithnetRMA to Update MIM Group Membership

Today I needed to reproduce a Microsoft Identity Manager (MIM) workflow issue when users were added to groups. My tolerance for doing it in the MIM Portal waned so I decided to try using the LithnetRMA PowerShell module to do it. In the past I would always use the FIM PowerShell Module for such tasks but now LithnetRMA is an option so I wanted to learn more about it.

Things I like about the LithnetRMA module:

• Open Source - the code is available on GitHub, even has a solid wiki!
• PowerShell Gallery - the module can be installed from the PowerShell Gallery (Install-Module -Name LithnetRMA)
• Code Quality - pretty great looking code
• Integrates with the MIM Web Services - does not depend on the FIMAutomation PowerShell Snap-In, which makes it more reliable and fast

The experiment was a success! I’m really happy with how easy it was to use. Here’s the sample:

<#
Install the module - choosing CurrentUser Scope so it does not require Administrator privilege
#>
Install-Module -Name LithnetRMA -Scope CurrentUser

<#
Get the user and group objects
#>
$user  = Get-Resource -ObjectType Person -AttributeName AccountName -AttributeValue cmart
$group = Get-Resource -ObjectType Group  -AttributeName DisplayName -AttributeValue cmartppedg5000

<#
Add the user to the group
#>
$group.ExplicitMember.Add($user.ObjectID)
Save-Resource -Resources $group

<#
Remove the user from the group
#>
$group.ExplicitMember.Remove($user.ObjectID)
Save-Resource -Resources $group