0 votes

I only want to allow a security role to write 'user must change password at next logon' and not all options they have under 'Account Options'. The only permission I can see in the GUI is the allow write access to 'Account Options". I'd rather not assign permissions to all these settings if I don't have to.

by (20 points)

1 Answer

0 votes
by (208k points)

Hello,

Unfortunately, there is no possibility to allow modifying only the User must change password at next logon option. You will need to grant the permissions to modify the Account Options, User Cannot Change Password and Password Last Set properties. For details, have a look at the following tutorial: https://www.adaxes.com/tutorials_DelegatingPermissions_GrantRightsToModifyAccountOptions.htm.

Related questions

0 votes
0 answers

I am trying to find a way to create Groups based off an OU and a list of options (check boxes) within the portal For example: Select the Target OU to add groups ... 3 - Remote Administrators Option 3 - Remote Developers Option 4 - Readers Option 4 - Writers

asked Sep 11, 2020 by dknapp (100 points)
0 votes
1 answer

Hello Forum, in our Adaxes environment we have a lot of security roles (one Security Role per Department). This allows the management of the Department to modify their Users / ... copy it to my newly created Role in powershell? Thanks a lot for your help.

asked Apr 30, 2015 by esoAdxAdmin (650 points)
0 votes
1 answer

I'm using the example from the following SDK page: http://www.adaxes.com/sdk/ManagingSecurityRoles.html # Allow: Reset Password -> User $entry = $role.Permissions.Create() ... from the example. What am I missing here? Thanks for any help you can provide

asked Nov 16, 2015 by drew.tittle (810 points)
0 votes
1 answer

Hello again! I've built a script to make a few Security Roles. I need to set the read permission to OUs in the script and I think I'm having an issue. I went into ... . Did I get the wrong GUID or am I doing something wrong in the script? Thanks again!

asked Nov 18, 2015 by drew.tittle (810 points)
0 votes
1 answer

Hi Our new user process is that a HR system creates the AD object and then the 1st line team use a web page to enable the account after filling out any extra ... enable the account? I've tried searching the properties for enable, disable, allow etc. Thanks

asked Sep 7, 2018 by chappers77 (1k points)
2,575 questions
2,317 answers
6,176 comments
767,630 users