Help with Updating Fields in AD and Clearing Fields in AD from CSV File

PowerShell Help
1

I have a script that is currently working fine. It pulls information from a CSV and updates the attributes in AD if the column in the CSV doesn’t contain #. I would like to also clear any attributes in AD (using -CLEAR with Set-ADUser) if the corresponding column contains a #.

Here is and example of the working code. Sector is the column header in the CSV and rraSector is the custom attribute in AD that is updated if the Sector column in the CSV doesn’t contain #:

$OUpath = 'OU=Users and Workstations,DC=Domain,DC=COM'

$csvdata = (Import-CSV D:\Data\\HR_Import.csv -Delimiter "|" )

foreach ($user in $csvdata) {
    $userNameEid = $user.Employeeid    
    $RRAAttrib = @{}
    
    if ($User.Sector -ne "#") {$Data = $User.Sector -split ";"
    $Sector = @() 
    ($Data.count-1)..0 | foreach {$Sector += $Data[$_]} } 

    If ($Sector) {$RRAAttrib.Add("rraSector", $Sector)}

   $adUser = Get-ADUser -Filter "employeeid -eq '$userNameEid'"

    $NumAttr = $RRAAttrib.Count

    If ($NumAttr -ge 1) {Set-ADUser -Identity $adUser -Replace $RRAAttrib}
}

I’m thinking there should be another array to contain the name of any custom attributes that need to be cleared if they contain # in the CSV column. Ideally, I think, there could be an ‘else’ attached to the ‘if’, such as:

$OUpath = 'OU=Users and Workstations,DC=Domain,DC=COM'

$csvdata = (Import-CSV D:\Data\\HR_Import.csv -Delimiter "|" )

foreach ($user in $csvdata) {
    $userNameEid = $user.Employeeid    
    $RRAAttrib = @{}
    $ClearAttrib = @{}
    
    if ($User.Sector -ne "#") {$Data = $User.Sector -split ";"
    $Sector = @() 
    ($Data.count-1)..0 | foreach {$Sector += $Data[$_]} }  else { if ($User.Sector -eq "#") ...}

    If ($Sector) {$RRAAttrib.Add("rraSector", $Sector)}

   $adUser = Get-ADUser -Filter "employeeid -eq '$userNameEid'"

    $NumAttr = $RRAAttrib.Count

    If ($NumAttr -ge 1) {Set-ADUser -Identity $adUser -Replace $RRAAttrib}
}

OR, perhaps, it would be better to cycle back through the CSV adding all fields that need to be cleared into $ClearAttrib after all values were updated in AD from $RRAAttrib?

As always, thank you for any guidance.

2

I actually didn’t really get what your question is. What is your question? :thinking:

How many custom attributes do you have in your AD? If you have an already working solution for one custom attribute why not uising the same solution for the other ones? I’d suspect you wouldn’t have hundrets of them, would you? :man_shrugging:t3:

3

19 total attributes that are updating properly now. However, the source file contains # for columns that don’t have data in them from a different system. For example, someone could have been in a committe and now they are no longer in that committee. Then, that column in the CSV would have a #. I need to account for that and clear the AD attribute if that corresponding column in CSV has a # rather than just skip the # as I am already doing.

so, yes, currently my script is updating AD proprely but now I need to clear certain fields in AD based on whether there is a # or not in the CSV. That’s where I could use some guidance - best way to go about detecting the # in the CSV and then clearing the associated attribute in AD in the same script.

4

Hmmm … if I’ve got you right this should be enough then …

$csvdata = Import-CSV -Path 'D:\Data\\HR_Import.csv' -Delimiter '|' 

foreach ($user in $csvdata) {
    $userNameEid = $user.Employeeid   
    $adUser = Get-ADUser -Filter "employeeid -eq '$userNameEid'"

    $RRAAttrib = @{}
    if ($User.Sector -ne '#') {
        $Data = $User.Sector -split ';'
        $Sector = @() 
        ($Data.count - 1)..0 | 
        ForEach-Object { 
            $Sector += $Data[$_] 
        }
        If ($Sector) { 
            $RRAAttrib.Add('rraSector', $Sector) 
            Set-ADUser -Identity $adUser -Replace $RRAAttrib
        }
    }
    else {
        Set-ADUser -Identity $adUser -Clear 'rraSector'
    }
}

!! Untested !! … test with test data first

5

That works! Oddly, enough, though when testing and putting in the #, the rraSector data was pulled from the user record below the first one (I was just testing with the first 5 records in the CSV but only changing data for the first user record) so it was not clearing. I moved the $adUser variable assignment higher in my script, before the “If ($Sector)…” and that did the trick.

THANK YOU!!!

6

Cool. :+1:t3: :love_you_gesture:t3: