Select OUs - You can select the OU you wish to delegate to the selected technician.When you select the desired domain, you will see advanced options for OU-based delegation and can be configured as needed.The delegations bear effect only in the product and the technicians' actual privileges in Active Directory will remain unchanged.Once you switch to OU-based delegation from the Domain based delegation, you will not be able to revert to Domain-based delegation.In the pop up window that opens, click on Switch Now to proceed.In the top right corner above the Delegate roles section, click on OU-based Delegation.Navigate to Delegation tab > Help Desk Delegation > Help Desk Technician > Edit technician.Implement security practices for IT regulatory compliances and other policies.
Ensure standard organization wide security practices for more efficient identity governance.Define, categorize and breakdown roles OU in a way that no technician has excess privileges than what is necessary to perform their delegated tasks.
With OU-based delegation in place, it is easier to: ADManager Plus provides a non-invasive OU-based delegation, with audit reports, to just the required roles to technicians.ĪDManager Plus' delegation also offers granular control over delegated tasks, via customizable workflows, which is pivotal for enforcing better security practices. Doing this with native tools can be complex and needs a new code every time you wish to delegate a specific role to a technician. Similarly, you can also delegate the 'reset password' role for Finance, Marketing and HR OUs to another technician, and so on. For example, you can delegate the 'user provisioning role' in Finance and Marketing OUs, and 'unlock users' role in the HR OU to technician A. OU-based delegation enables you to delegate different set of roles for different OUs to any technician.
0 kommentar(er)
