0 votes

I have a Web Interface for our Voice and Data group. With this interface they manage and create VPN users. They've asked for a report that they need to import into another system. So I want to make it available to them on their web interface. It has nothing to do with VPN stuff, so I've got to assign the regular employee OU to them as well.
So if I do this in their web interface, they now have the same abilities (edit, password resets, creation, etc) on the employees OU that they have for the VPN users.

So can you seperate them in the same interface? Example: They can edit/manage the VPN user, but the regular employee users which are part of the report are for view and export only?

by (1.4k points)

1 Answer

0 votes
by (233k points)
selected by
Best answer

Hello,

Yes, it is possible. You will need to create two Security Roles for users that will need the report.
The first role will grant permissions to view all employee users. The role will look like the following:

The second role will grant permissions to view and modify VPN users. The role will look like the following:

For details on delegating permissions, have a look at tutorials in the Delegating Permissions section: https://www.adaxes.com/tutorials_Delega ... ssions.htm.

0

Wow, that's fairly simple. Thank you!

Related questions

0 votes
1 answer

For a custom command, I need to perform some actions, then reboot a computer, then perform some more. How can we handle the reboot so the actions continue once the computer is back up and ready? Thanks

asked May 17 by jcrook (60 points)
0 votes
0 answers

Hello! We have a business rule in place that will request approval from a group's owner before adding an account to that group for certain groups. We also have a custom ... name reference is invalid. Do you have any ideas for how to get around this error?

asked Jan 24 by KelseaIT (320 points)
0 votes
1 answer

Hello, I am working on delegating the ability to create user accounts. One thing I'm not sure how to handle is duplicate user names. I would like it if I could have an ... gets passed off to me to create manually so I'd love to be able to automate it!

asked Mar 24, 2016 by drew.tittle (810 points)
0 votes
0 answers

When the UPN being created is the same as an existing one except for the case. For instance, the new UPN is sally.fields but there's an existing Sally.Fields. The ... but then fails to create the AD account indicating that the UPN is not unique forestwide.

asked Jul 13 by sandramnc (820 points)
0 votes
1 answer

Or is there another solution to solve this?

asked Sep 15 by boris (260 points)
2,880 questions
2,600 answers
6,750 comments
114,615 users