ActiveDirectory interface 
Active Directory
Properties
| active | 
	Id of the Active Directory  | 
| administrators | Users to be added to the Built-in Administrators active directory group. A list of unique usernames without domain specifier  | 
| ad | 
	Name of the active directory machine. This optional parameter is used only while creating kerberos volume  | 
| aes | 
	If enabled, AES encryption will be enabled for SMB communication.  | 
| allow | 
	If enabled, NFS client local users can also (in addition to LDAP users) access the NFS volumes.  | 
| backup | 
	Users to be added to the Built-in Backup Operator active directory group. A list of unique usernames without domain specifier  | 
| dns | Comma separated list of DNS server IP addresses (IPv4 only) for the Active Directory domain  | 
| domain | Name of the Active Directory domain  | 
| encrypt | 
	If enabled, Traffic between the SMB server to Domain Controller (DC) will be encrypted.  | 
| kdcIP | kdc server IP address for the active directory machine. This optional parameter is used only while creating kerberos volume.  | 
| ldap | 
	Specifies whether or not the LDAP traffic needs to be secured via TLS.  | 
| ldap | 
	LDAP Search scope options  | 
| ldap | 
	Specifies whether or not the LDAP traffic needs to be signed.  | 
| organizational | 
	The Organizational Unit (OU) within the Windows Active Directory  | 
| password | Plain text password of Active Directory domain administrator, value is masked in the response  | 
| preferred | 
	Comma separated list of IPv4 addresses of preferred servers for LDAP client. At most two comma separated IPv4 addresses can be passed.  | 
| security | 
	Domain Users in the Active directory to be given SeSecurityPrivilege privilege (Needed for SMB Continuously available shares for SQL). A list of unique usernames without domain specifier  | 
| server | 
	When LDAP over SSL/TLS is enabled, the LDAP client is required to have base64 encoded Active Directory Certificate Service's self-signed root CA certificate, this optional parameter is used only for dual protocol with LDAP user-mapping volumes.  | 
| site | The Active Directory site the service will limit Domain Controller discovery to  | 
| smb | 
	NetBIOS name of the SMB server. This name will be registered as a computer account in the AD and used to mount volumes  | 
| status | Status of the Active Directory NOTE: This property will not be serialized. It can only be populated by the server.  | 
| status | 
	Any details in regards to the Status of the Active Directory NOTE: This property will not be serialized. It can only be populated by the server.  | 
| username | A domain user account with permission to create machine accounts  | 
Property Details
		activeDirectoryId
	  
	Id of the Active Directory
activeDirectoryId?: string
				Property Value
string
administrators
Users to be added to the Built-in Administrators active directory group. A list of unique usernames without domain specifier
administrators?: string[]
				Property Value
string[]
		adName
	 
	Name of the active directory machine. This optional parameter is used only while creating kerberos volume
adName?: string
				Property Value
string
		aesEncryption
	 
	If enabled, AES encryption will be enabled for SMB communication.
aesEncryption?: boolean
				Property Value
boolean
		allowLocalNfsUsersWithLdap
	     
	If enabled, NFS client local users can also (in addition to LDAP users) access the NFS volumes.
allowLocalNfsUsersWithLdap?: boolean
				Property Value
boolean
		backupOperators
	 
	Users to be added to the Built-in Backup Operator active directory group. A list of unique usernames without domain specifier
backupOperators?: string[]
				Property Value
string[]
dns
Comma separated list of DNS server IP addresses (IPv4 only) for the Active Directory domain
dns?: string
				Property Value
string
domain
Name of the Active Directory domain
domain?: string
				Property Value
string
		encryptDCConnections
	 
	If enabled, Traffic between the SMB server to Domain Controller (DC) will be encrypted.
encryptDCConnections?: boolean
				Property Value
boolean
kdcIP
kdc server IP address for the active directory machine. This optional parameter is used only while creating kerberos volume.
kdcIP?: string
				Property Value
string
		ldapOverTLS
	 
	Specifies whether or not the LDAP traffic needs to be secured via TLS.
ldapOverTLS?: boolean
				Property Value
boolean
		ldapSearchScope
	  
	
		ldapSigning
	 
	Specifies whether or not the LDAP traffic needs to be signed.
ldapSigning?: boolean
				Property Value
boolean
		organizationalUnit
	 
	The Organizational Unit (OU) within the Windows Active Directory
organizationalUnit?: string
				Property Value
string
password
Plain text password of Active Directory domain administrator, value is masked in the response
password?: string
				Property Value
string
		preferredServersForLdapClient
	    
	Comma separated list of IPv4 addresses of preferred servers for LDAP client. At most two comma separated IPv4 addresses can be passed.
preferredServersForLdapClient?: string
				Property Value
string
		securityOperators
	 
	Domain Users in the Active directory to be given SeSecurityPrivilege privilege (Needed for SMB Continuously available shares for SQL). A list of unique usernames without domain specifier
securityOperators?: string[]
				Property Value
string[]
		serverRootCACertificate
	  
	When LDAP over SSL/TLS is enabled, the LDAP client is required to have base64 encoded Active Directory Certificate Service's self-signed root CA certificate, this optional parameter is used only for dual protocol with LDAP user-mapping volumes.
serverRootCACertificate?: string
				Property Value
string
site
The Active Directory site the service will limit Domain Controller discovery to
site?: string
				Property Value
string
		smbServerName
	  
	NetBIOS name of the SMB server. This name will be registered as a computer account in the AD and used to mount volumes
smbServerName?: string
				Property Value
string
status
Status of the Active Directory NOTE: This property will not be serialized. It can only be populated by the server.
status?: string
				Property Value
string
		statusDetails
	 
	Any details in regards to the Status of the Active Directory NOTE: This property will not be serialized. It can only be populated by the server.
statusDetails?: string
				Property Value
string
username
A domain user account with permission to create machine accounts
username?: string
				Property Value
string