• State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 95 subscribers
  • Views 4242 views
  • Users 0 members are here
Options
Related
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Managing AD group

ulrik.farmen
over 7 years ago

 Hi,

 

What is the easiest way to manage AD Group membership from the Web Portal? Should we use application Role?

I thought having "group owner" for the AD group was enough, but does not seem like it. 

 

I created application role with the permission group "vi_4_ITSHOP_ATTESTOR" and now he is able to add/remove membership for the AD group in the Web Portal.

Except he cannot remove users from the group who has "direct membership".

 

Resolution?

 

Parents
  • 0 over 7 years ago
    Hi Ulrik

    This is by design and its appropriate: only requested memberships can be handled through IT-Shop. Direct assignments can be handled by the admins using the manager tool.

    A approach for an resolution might be the following: create requests for those groupmemberships using the according method (depending on the version of Identity Manager you are using). These methods are built for exactly that issue.

    HTH
    Carsten
Reply
  • 0 over 7 years ago
    Hi Ulrik

    This is by design and its appropriate: only requested memberships can be handled through IT-Shop. Direct assignments can be handled by the admins using the manager tool.

    A approach for an resolution might be the following: create requests for those groupmemberships using the according method (depending on the version of Identity Manager you are using). These methods are built for exactly that issue.

    HTH
    Carsten
Children
No Data