Here’s several scripts that may be very helpful for anyone that needs to change the self-service portal role for their users in AirWatch. AirWatch is becoming more robust and mature with every new release, but they still have a long way to go towards overall usability for administrators.<\/p>\n
<\/p>\n
#******************************************
\n### AirWatch API Connection
\n###
\n### Template from https:\/\/support.air-watch.com\/posts\/94020718-REST-API-Authentication-in-PowerShell
\n###
\n### 2015-11-15 Brian Deyo www.briandeyo.us
\n#*******************************************<\/p>\n
write-output ” __ ___ __ ”
\nwrite-output ” \/\\ | |__) | | \/\\ | \/ “ |__| ”
\nwrite-output ” \/~~\\ | | \\ |\/\\| \/~~\\ | \\__, | | ”
\nwrite-output ” ”<\/p>\n
###############################
\n###
\n### BEGIN CONFIGURATION SECTION
\n###
\n###############################<\/p>\n
###Insert AirWatch API Key here
\n###Consider it best practice to create an API Key for every account that needs API access. Easier to manage access that way.
\n###
\n$APIKEY = “blahblahblahAPIKey”<\/p>\n
###Insert AirWatch Application Server URL
\n###The Server is the “Application Server” component of the AirWatch environment.
\n###
\n$AWHost = “xxyyy.awmdm.com\/API\/v1”<\/p>\n
###Pop up to get username and password, and then encodes U & P to string
\n###
\n$Credential = Get-Credential
\n$EncodedUsernamePassword = [System.Convert]::ToBase64String([System.Text.Encoding]::UTF8.GetBytes($(‘{0}:{1}’ -f $Credential.UserName,$Credential.GetNetworkCredential().Password)))<\/p>\n
###Define Headers to send with each API access
\n###Switch Basic to Directory if using AD integrated account
\n###
\n$Headers = @{‘Authorization’ = “Basic $($EncodedUsernamePassword)”;’aw-tenant-code’ = “$APIKey”;’Content-type’ = ‘application\/json’}<\/p>\n
###Define output folder for Rest Logs when the out-file cmdlet is used
\n###
\n$RestLogPath = “\\\\fileshare\\log\\location”<\/p>\n
###############################
\n###
\n### END CONFIGURATION SECTION
\n###
\n###############################<\/p>\n
#***********************************
\n# List devices for a specific user
\n#***********************************
\n#
\n#write-output “Type User’s email address”
\n#$UserEmail = Read-Host
\n#Invoke-RestMethod -Method Get -Uri https:\/\/$AWHost\/mdm\/devices\/search?user=$UserEmail -Headers $Headers<\/p>\n
#***********************************
\n# Set Enrollment User’s SSP Access
\n#***********************************
\n#
\n# Define the JSON in the $body variable. Then the Invoke-RestMethod converts to JSON on the fly
\n#
\n#$Role = “SSP ROLE NAME”
\n#$user = “userID”
\n#$body = @{
\n# Role = $Role
\n# }
\n#Invoke-RestMethod -Method Post -Uri https:\/\/$AWHost\/system\/users\/$user\/update -Body (ConvertTo-Json $body) -Headers $Headers<\/p>\n
#***********************************
\n# Get Enrollment User Details
\n#***********************************
\n#$user = Read-Host
\n#$Filename = “UserDetails.txt”
\n#Invoke-RestMethod -Method Get -Uri https:\/\/$AWHost\/system\/users\/$user -Headers $Headers | Out-File -Append $RestLogPath$Filename<\/p>\n
#***********************************
\n# Change a single Users SSP Role
\n#***********************************<\/p>\n
#$User = Read-Host
\n#$NewRole = “SSP ROLE NAME”
\n#$body = @{
\n# Role = $NewRole
\n# }
\n#Invoke-RestMethod -Method Post -Uri https:\/\/$AWHost\/system\/users\/$User\/update -Body (ConvertTo-Json $body) -Headers $Headers<\/p>\n
#*************************************************************
\n# Search for All Users that have specific role and change it
\n#*************************************************************
\n#$CurrentRole = “SSP ROLE NAME”
\n#$Filename = “SSP ROLE NAME.txt”
\n#$UserList = Invoke-RestMethod -Method Get -Uri https:\/\/$AWHost\/system\/users\/search?role=$CurrentRole -Headers $Headers
\n#$list = $UserList.Users.Id
\n###Save output of every UserID getting changed
\n#$list.value | Out-File $RestLogPath$Filename
\n#
\n### Loop to change all the roles from the dumped list
\n#
\n#$NewRole = “SSP ROLE NAME”
\n#foreach ($User in $list)
\n#{
\n# $UserToUpdate = $User.value
\n#
\n# $body = @
\n# {
\n# Role = $NewRole
\n# }
\n# Invoke-RestMethod -Method Post -Uri https:\/\/$AWHost\/system\/users\/$UserToUpdate\/update -Body (ConvertTo-Json $body) -Headers $Headers
\n#}<\/p>\n
#************************************
\n# List Number of Users in Each Role
\n#************************************
\n#$RolesToCheck = @(“Basic Access”,”External Access”,”Full Access”)
\n#Foreach ($Role in $RolesToCheck)
\n#{
\n# $Filename = “$Role – TOTALS.txt”
\n# $UserList = Invoke-RestMethod -Method Get -Uri https:\/\/$AWHost\/system\/users\/search?role=$Role -Headers $Headers
\n# $list = $UserList.Users.Id
\n# ###Save output of every UserID getting changed
\n# $UserList | Tee-Object $RestLogPath$Filename
\n#}<\/p>\n
<\/p>\n","protected":false},"excerpt":{"rendered":"
Here’s several scripts that may be very helpful for anyone that needs to change the self-service portal role for their users in AirWatch. AirWatch is becoming more robust and mature with every new release, but they still have a long way to go towards overall usability for administrators. #****************************************** ### AirWatch API Connection ### …<\/p>\n","protected":false},"author":12,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[19,306,10,307],"tags":[308,310,309,276,12,311],"class_list":["post-1348","post","type-post","status-publish","format-standard","hentry","category-mobile-devices","category-scripting","category-tech","category-workspace_one","tag-airwatch","tag-api","tag-rest","tag-script","tag-scripting","tag-ssp"],"_links":{"self":[{"href":"https:\/\/www.briandeyo.us\/index.php\/wp-json\/wp\/v2\/posts\/1348","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.briandeyo.us\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.briandeyo.us\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.briandeyo.us\/index.php\/wp-json\/wp\/v2\/users\/12"}],"replies":[{"embeddable":true,"href":"https:\/\/www.briandeyo.us\/index.php\/wp-json\/wp\/v2\/comments?post=1348"}],"version-history":[{"count":3,"href":"https:\/\/www.briandeyo.us\/index.php\/wp-json\/wp\/v2\/posts\/1348\/revisions"}],"predecessor-version":[{"id":1351,"href":"https:\/\/www.briandeyo.us\/index.php\/wp-json\/wp\/v2\/posts\/1348\/revisions\/1351"}],"wp:attachment":[{"href":"https:\/\/www.briandeyo.us\/index.php\/wp-json\/wp\/v2\/media?parent=1348"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.briandeyo.us\/index.php\/wp-json\/wp\/v2\/categories?post=1348"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.briandeyo.us\/index.php\/wp-json\/wp\/v2\/tags?post=1348"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}