I don't think you can go straight to AD groups but I do know you can get to them via membership in Cognos groups, api/v1/groups/[group_id]. I've written code in Python to walk the role/group members to export to a CSV. The details in the JSON response will contain your namespace ID to determine if it is an AD group. Something else that I had to do, and maybe it was because I was doing it over VPN, but I ended up writing separate member walk functions: get_cognos_group_members() and get_ad_group_members(). The AD version is actually using the ldap3 library to talk to AD directly instead of through the Cognos REST API because I found the REST API would time out frequently even after increasing the time out and setting up a urllib3.utils.retry.
------------------------------
Robert Hofstetter
------------------------------
Original Message:
Sent: Thu August 26, 2021 07:54 PM
From: Ryan Clapp
Subject: Using the REST API to find Groups in our AD Namespace
I have been playing around with the CA 11 REST API https://www.ibm.com/docs/en/cognos-analytics/11.1.0?topic=apis-rest-api
I am able to retreive Cognos groups, but I don't see a way to retreive groups in our AD Namespace.
Is it possible to do this?
------------------------------
Ryan Clapp
------------------------------
#CognosAnalyticswithWatson