0 votes

I need to send an e-mail to the owner ("managed by") for each group. The e-mail should contain a list of group members. What is the best way to do that?

by (20 points)

1 Answer

0 votes
by (12.4k points)

Hello,

To achieve the desired, you can schedule the Members of my managed groups built-in report (located in the Reports/All Reports/Groups/Membership container by default). For information on how to schedule reports, have a look at the following tutorial: https://www.adaxes.com/help/ScheduleReports.

0

If a user does not have access to Adaxes but still manages members of a group by company policy, we need a way to provide a list of members of all groups to their respective managers.

I was able to copy the existing "Members of my managed groups" and made the manager user selectable, but it isn't what I need.

I need a periodic report to run for all groups to send each separate manager only the members of their own managed groups via email. Possible?

0

Hello Neal,

If a user does not have access to Adaxes but still manages members of a group by company policy, we need a way to provide a list of members of all groups to their respective managers.

Please, clarify what is meant by the user does not have access to Adaxes. Is the user account managed in Adaxes?

I was able to copy the existing "Members of my managed groups" and made the manager user selectable, but it isn't what I need. I need a periodic report to run for all groups to send each separate manager only the members of their own managed groups via email. Possible?

There is no need to modify the built-in report to achieve the required. If the group manager account is not in the list of Adaxes unmanaged accounts and the account is specified as the group owner, you can schedule the Members of my managed groups built-in report and configure it to be delivered by email. Then add the managers as the scheduled report recipients. The report will be generated for each recipient separately and the results will depend on what groups each recipient manages. Pay attention that native Active Directory permissions are not considered in Adaxes. The report will display only objects the manager has permissions to see. By permissions here, we mean those that are granted by Adaxes security roles. image.png

0

our MSP manages various customer AD systems using Adaxes and many group managers are customer employees or non IT department heads responsible for allowing access to groups they are listed as managers on. Since they are non IT users, they do not log in to Adaxes to run reports because they do not and will not have access.

All users involved are managed by Adaxes, however.

I think we really need separate reports per group, where the contents are members of the group and the report is sent to the user listed as the manager of that group. Would this require a script?

Does that make sense?

0

Hello Neal,

If you schedule a report, there is no need for the users to sign-in to Adaxes to get the generated report. Scheduled reports are generated automatically based on the specified schedule. A scheduled report is generated for each recipient. According to the description you provided, scheduling the Members of my managed groups built-in report is exactly what is required. If you configure the scheduled report to be delivered by email, the generated report will be sent to the email address of the recipient automatically. You can also check how the report will look for a particular user by viewing the report as another user: https://www.adaxes.com/help/ViewReportAsAnotherUser. We suggest you to try scheduling a report for several test accounts to see how it works: https://www.adaxes.com/help/ScheduleReports.

0

Thank you. I have noticed that running as a user shows empty groups or only the user the report is viewed as. I believe this is because the Adaxes roles and permissions do not account for all domain users as having any access to read any other members.

As a test, I added one user to a read-only all domain objects for the user's domain and the report shows all members for groups that user manages.

I guess we need to carefully consider and test what minimum access is required for this.

I will do some more testing and get back to you. Thank you!

Related questions

0 votes
1 answer

How can I allow manager of distribution group to edit just email aliases (proxy addresess) of that group? Not the primary SMTP address.

asked Nov 19, 2019 by KIT (910 points)
0 votes
1 answer

Using the powershell module, I know how to create a scheduled task, and also how to bind to a scheduled task that is already known. I also have used code to try creating ... same time as another. These are all one-time tasks and will be removed once executed.

asked Jan 19 by aweight (40 points)
0 votes
1 answer

Currently, when I disable a user account in Adaxes, the group memberships of the user remain intact. I'd like to automate the removal of group memberships such as distribution ... a list of groups/DL that the user was previously in and removed from. Thanks!

asked Nov 3, 2021 by jayden.ang (20 points)
0 votes
1 answer

When we deprovision a user the member of groups are deleted and the power shell scrips only runs as removing all memberships. I can't see what was removed. Is there a scrips I can run prior to removing those memberships that will e-mail what they are?

asked Oct 15, 2019 by meyerm (50 points)
0 votes
1 answer

We have a 3rd party vendor that we are able to add users based on AD security groups. What I need to do is set a parameter for the number of available licenses and whenever ... the group is 495 I would like an email to trigger telling me to add more licenses.

asked Oct 12, 2022 by A_Pastor (70 points)
3,411 questions
3,108 answers
7,912 comments
545,843 users