7.1

Scenario: Add a Custom Property to Blueprints to Override an Active Directory
Policy
As a blueprint architect for the development business group, you have a blueprint that includes an
application machine and a database machine. You want the database machine record added to an
organizational unit that is dierent from the applied Active Directory policy.
You have an existing policy that is applied to the development business group. The policy adds machine
records to ou=development,dc=corp,dc=domain,dc=com. You want all database machines to be added to
ou=databases,dc=corp,dc=domain,dc=com. In a blueprint that includes a database server, you override the
Active Directory organizational unit to add the database machine record to
ou=databases,dc=corp,dc=domain,dc=com.
This scenario makes the following assumptions:
n
Your Active Directory includes organizational units for development and databases.
n
You have a test blueprint that is included in a service and the service is entitled.
In addition to this simple example of how you can override the policy, you can use custom properties with
Active Directory policy to make other changes to Active Directory when you deploy blueprints. See
“Working With Active Directory Policies,” on page 234.
Prerequisites
n
Verify that you have at last one Active Directory policy. See “Create an Active Directory Policy,” on
page 235. For example, you create a development policy that adds records to
ou=development,dc=corp,dc=domain,dc=com.
n
Verify that you have a business group to which you applied an Active Directory policy. See “Create a
Business Group,” on page 129. For example, your development business group uses the development
policy.
Procedure
1 In your test blueprint, select the database machine in the canvas.
2 Click the Properties tab.
3 Click the Custom Properties tab.
4
Click the New icon (
).
5 Add the custom property to change the default organizational unit.
a In the Name text box, enter ext.policy.activedirectory.orgunit.
b In the Value text box, enter ou=databases,dc=corp,dc=domain,dc=com.
c Deselect Overridable.
d Click OK.
6 Click Finish.
The test blueprint includes the custom property, but your users do not see the custom property in the
request form.
What to do next
Request your test blueprint. Verify that the record for the database machine was added to the database
organizational unit, and that the record for the application machine is added to the development
organizational unit. When you are satised with the results, you can add the custom property to your
production blueprints.
Configuring vRealize Automation
236 VMware, Inc.