0 votes

Hi,

in our company there is a policy: only disabled accounts can be deleted.
Now my problem:
I created 2 business units: "Enabled Accounts" and "Disabled Account".
To enforce the policy I'm looking for a possibility to restrict the available actions.
That means for the business unit "Enabled Accounts" only the action "Disable" should be available/visible.
And for the business unit "Disabled Accounts" only the action "Delete" should be available.
But I don't find any possibility to restrict the access.

Many thanks.

by (460 points)

1 Answer

0 votes
by (270k points)
selected by
Best answer

Hello Horst,

There is no possibility to restrict operations visibility based on Business Unit membership.

As a workaround, you can use Business Rules that will trigger before disabling/deleting user accounts and cancel the operation if the user is member of the corresponding Business Unit. If this solution meets your needs, we will provide you with detailed instructions.

0

Ok, many thanks.

0

Hello Horst,

Could you specify whether you need detailed instructions on creating the Business Rules we referenced?

0

Hi,

many thanks for your support.
I'm able to create such a BR.
You can mark the ticket as resolved. :D

0

I was to quick with my last post :(
I would like to inform the initiator about the canceled action.
Is there a way to show an error message?

0

Hello Horst,

The reason for operation cancellation can be specified in the settings of the Cancel operation action.

The reason will be displayed in the Execution log.

0

The message for the initiator is ok (wimessage), but the log does not show the same information (logmessage)

0

Hello Horst,

The information is displayed in the Operation execution log. To view it, double-click the log record.

0

I'm testing your PS script to export logging data into csv. The "original" script does' not list the status and not this specific information.
Is is possible to add these fields with "household remedies" or do I have to use an external tool?

0

Hello Horst,

We have updated the script in our repository. Now the CSV file will also contain operation state. You can find the script here: http://www.adaxes.com/script-repository ... v-s183.htm.

Related questions

0 votes
1 answer

Hello, I am trying to find out if it would be possible to create a tool/ process on Adaxes that will allow me to create a new AD user and set a time limit on the ... or guides on how i might create a new users or set deletion / disable times? Thanks Rhys

asked Nov 9, 2021 by R_C (70 points)
0 votes
1 answer

We are trying to extend our Adaxes management to O365 / Azure only user objects. Currently we use employee type to add traditional active directory accounts to business units and ... so, can this be used to create dynamic mail enabled security groups in O365?

asked May 3, 2022 by adaxes_user2 (40 points)
0 votes
1 answer

Is it possible to have the search function on the self-service portal return enabled accounts and restrict results to certain OUs?

asked Jan 5, 2017 by jaredneedell (50 points)
0 votes
1 answer

I'm wondering if at any point you will be including the ability to manage Cloud Only accounts. Use case scenarios: Create Guests Create Cloud Only Groups Add Guests and AD Users to Cloud Only Groups

asked Jul 29, 2020 by ComputerHabit (790 points)
0 votes
0 answers

It would be great if we could run a report on an OU and get the following information: Computer Name Local Accounts Whether or not the account is an administrator ... this is less important. Thanks in advance. Your support team is great and appreciated.

asked Sep 8, 2021 by mikek (80 points)
3,326 questions
3,026 answers
7,727 comments
544,678 users