Group Manager Security Role

Question

How would I define a "Group Manager" role that only allows the trustee to add direct users (not groups) to a managed group?

Thanks

Answer 1

Hello,

Unfortunately it is impossible to do it with the help of Security Roles. However, you can control the type of group members using Business Rules:

1. Create a Business Rule that is triggered before adding a member to a group.
   

2. Add Run a program or PowerShell script action to the Business Rule.

3. Enter the following PowerShell script for the action:

    Import-Module Adaxes
    $Context.GetModifiedPropertyValues("member") |  Get-AdmObject | Foreach-Object { if ($_.ObjectClass -ne "user") {$Context.Cancel("Only users can be added to the group.")} }
   

   Please note: to use this script, you need to install the Adaxes PowerShell Module on the computer, where the Adaxes service is running. Adaxes PowerShell Module is installed with the same installation package as used to install Adaxes service.

4. Add conditions for the action. For example:
   

For more details, please see Validate/Modify User Input Using a Script.

Comments

That is perfect. It works as expected. Thanks!