Product tasks
You can configure Tasks to run during various stages of the Product request lifecycle. Both Pre-defined tasks and PowerShell tasks can be used in this way.
To get started, Add a pre-defined product task or Add a PowerShell product task.
PowerShell product tasks use native PowerShell logging.
Write-Information "Information"Write-Host "Equivalent to Write-Information"Write-Error "An error"Write-Warning "A warning"Write-Verbose -Verbose "Verbose requires the -Verbose flag"Write-Debug -Debug "Debug requires the -Debug flag"
Tip
HelloID interprets Write-Error messages as task failure, in which case the task execution will be labeled Failed in Self Service > Request History.
When testing your script, you can preview log messages on the Received Logs tab. To view them in production, View product request history.
Control which PowerShell log levels are shown on the Received Logs tab using the $VerbosePreference, $InformationPreference, and $WarningPreference variables. Levels set to Continue will be shown. Levels set to SilentlyContinue will not.
HelloID's Audit logs store information long-term for organizational audits or compliance. Audit logs are separate from PowerShell script logging.
In PowerShell product tasks, write custom messages into the audit logs using the following template:
$Log = @{
Action = "CreateAccount"
System = "ActiveDirectory"
Message = "Created account with username [email protected]"
IsError = $false
TargetDisplayName = "Jan Willem (1000)"
TargetIdentifier = "AD-SID"
}
Write-Information -Tags "Audit" -MessageData $LogTo preview audit logs while testing your script, go to the Received Audit Logs tab. To view audit logs in production, View product request history or view them in the main Audit logs interface.
- Action
An enum that describes what the delegated form does. If no value is specified, it is set to
Undefined. Optional.UndefinedCreateAccountEnableAccountUpdateAccountDisableAccountMoveAccountDeleteAccountGrantMembershipRevokeMembershipCreateResourceUpdateResourceDeleteResourceSendNotificationSetPassword
- System
A string that contains the name of the system that the delegated form modified. Optional.
- Message
A string that describes the action taken. Required.
- IsError
A boolean that reports whether the form succeeded (
$false; default) or failed ($true). Optional.- TargetDisplayName
A string that contains the display name of the object that the form modified. Optional.
- TargetIdentifier
A string that contains the unique identifier of the object that the form modified. Optional.
PowerShell product tasks support email sends via the following template:
$email = @{
from = "[email protected]"
to = "[email protected]"
cc = "[email protected]"
bcc = "[email protected]"
subject = "Created account with username [email protected]"
body = "<strong>This is the email body.</strong>"
confidential= $false
}
Write-Information -Tags "Email" $emailWhen confidential is set to $false, the email and its contents are automatically logged in the Audit logs. When it is set to $true, the email is not logged.
When the Write-Information cmdlet is used with the Email tag, it only sends the specified hash table as an email. It does not create a PowerShell log entry.
The from address must either 1) have a verified domain (see Configure a custom 'from' address for emails), or 2) be set to [email protected]. Otherwise, the send will fail.
Tip
Emails are only sent when the script runs in production. No emails are sent when the script is tested in preview.