Softerra Adaxes allows to modify native permissions of AD objects using the standard ACL editor. The permissions assigned in this manner are only effective, when Active Directory is accessed directly. When Active Directory is accessed via the Adaxes service, the permissions granted by the Security Roles are applied.
To edit native AD permissions of an object, you must have the Modify Permissions and Modify Owner rights on this object.
Launch the Adaxes Administration Console.
In the Console Tree, expand your service node (the
icon represents service nodes).
Expand
Active Directory / <domain>.
Right-click the AD object you need, and click Edit Native Security.
In the Permissions dialog, that opens do the following:
To grant permissions on this object to a new user or group, click Add, select users or groups, to which you want to assign permissions, and specify necessary permissions in the box below.
To modify permissions of a user or group that has permissions assigned on this object, select the user or group you need, and check permissions you want to assign in the Allow column or check permissions you want to deny in the Deny column.
To remove permissions assigned to a user or group on this object, select the user or group you need, and click the Remove button.
![[Tip]](img/tip.png)
Tip For special permissions or advanced settings, click the Advanced button below. When finished, click OK.