merddyin / ADDeploy

Used to deploy components to support an ESAE forest and RBAC model via native control.
MIT License
1 stars 0 forks source link

Missing SQLite database documentation. #6

Open PatrickOnGit opened 1 year ago

PatrickOnGit commented 1 year ago

The SQLite DB contains all "knowledge" of the AD structure being deployed. Unfortunately there is not documentation on the relationship within the database and what it actually does in AD.

It would be great to get some insides on what has to be changed where to add new delegations or new property groups etc.

I did some reverse engineering and documented the following schema:

ADDeploy SQLlite DB schema

And tried to somehow visualize it:

ADDeploy SQLlite DB Tables

merddyin commented 1 year ago

Agreed that there is a lack of documentation at present. Essentially however, there are only a couple of tables that would require updating at present...Cust_OU_Organization gets updated to define new organization level OUs. AP_PropGroups gets updated to add new TaskGroups to be deployed, and AP_PropertyGroupMap is only updated when a property group will be used to set AD delegations, in which case there needs to be a mapping to the properties to assign ACLs for.