Source: projects/identity-management/oim-kb-update/sandbox-host/2026-04-27-adsgroup-basetreehasobject-shipped-sql-evidence.md

> Source: projects/identity-management/oim-kb-update/sandbox-host/2026-04-27-adsgroup-basetreehasobject-shipped-sql-evidence.md

ADS BaseTreeHasADSGroup + BaseTreeHasObject shipped SQL — Sandbox host evidence

Environment:

• Host: im.sandbox.local (WinRM HTTP 5985)
• Paths inspected (read-only):
• C:\Dev\OneIdentityManager.10.0\Modules\ADS\database\MSSQL\050Triggers\ADS_TBaseTreeHasADSGroup.sql
• C:\Dev\OneIdentityManager.10.0\Modules\ADS\database\MSSQL\040Procedures\ADS_ZBaseTreeHasObject.sql
• Observed: 2026-04-27

1) ADS_TBaseTreeHasADSGroup.sql (trigger definitions)

File contains create or alter trigger ADS_TIBaseTreeHasADSGroup:

• Runs QER_PAssignmentCheckValid 'ADS-AsgnBT-ADSGroup', ...
• Blocks invalid IT Shop flag combinations at assignment-time via QER_FGIITShopFlagCombineValid(...) + RAISERROR
• Enqueues QER-K-OrgAutoChild when a BO node assignment is inserted (BaseTree.ITShopInfo='BO' and XIsInEffect=1)

2) ADS_ZBaseTreeHasObject.sql (DBQueue task)

File contains create or alter procedure ADS_ZBaseTreeHasObject (@SlotNumber int):

• Reads existing BaseTreeHasObject rows with ObjectKey like '<Key><T>ADSGroup</T>%'
• Reads “upcoming” effective assignments from BaseTreeHasADSGroup and joins ADSGroup.XObjectKey
• Computes and applies deltas via QBM_PDBQueueCalculateDelta
• Calls QER_PBasetreeHasObjectPostProc after delta application

Cross-reference:

• Live DB evidence and concrete sandbox row examples are in projects/identity-management/oim-kb-update/sandbox-db/2026-04-27-basetreehasadsgroup-pr-links-and-basetreehasobject-evidence.md.