0 votes

I have a Web Interface for our Voice and Data group. With this interface they manage and create VPN users. They've asked for a report that they need to import into another system. So I want to make it available to them on their web interface. It has nothing to do with VPN stuff, so I've got to assign the regular employee OU to them as well.
So if I do this in their web interface, they now have the same abilities (edit, password resets, creation, etc) on the employees OU that they have for the VPN users.

So can you seperate them in the same interface? Example: They can edit/manage the VPN user, but the regular employee users which are part of the report are for view and export only?

by (1.4k points)

1 Answer

0 votes
by (279k points)
selected by
Best answer


Yes, it is possible. You will need to create two Security Roles for users that will need the report.
The first role will grant permissions to view all employee users. The role will look like the following:

The second role will grant permissions to view and modify VPN users. The role will look like the following:

For details on delegating permissions, have a look at tutorials in the Delegating Permissions section: https://www.adaxes.com/tutorials_Delega ... ssions.htm.


Wow, that's fairly simple. Thank you!

Related questions

0 votes
1 answer

For a custom command, I need to perform some actions, then reboot a computer, then perform some more. How can we handle the reboot so the actions continue once the computer is back up and ready? Thanks

asked May 17, 2022 by jcrook (100 points)
0 votes
0 answers

Hello! We have a business rule in place that will request approval from a group's owner before adding an account to that group for certain groups. We also have a custom ... name reference is invalid. Do you have any ideas for how to get around this error?

asked Jan 24, 2022 by KelseaIT (320 points)
0 votes
1 answer

Hello, I am working on delegating the ability to create user accounts. One thing I'm not sure how to handle is duplicate user names. I would like it if I could have an ... gets passed off to me to create manually so I'd love to be able to automate it!

asked Mar 24, 2016 by drew.tittle (810 points)
0 votes
0 answers

When the UPN being created is the same as an existing one except for the case. For instance, the new UPN is sally.fields but there's an existing Sally.Fields. The ... but then fails to create the AD account indicating that the UPN is not unique forestwide.

asked Jul 13, 2022 by sandramnc (870 points)
0 votes
1 answer

I belive we may have opened a ticket for this question in the past but I can't find the answer. We have a need to delay changing user attributes until their ... title, and department until the scheduled date. Any help would be much much appreciated. Thanks!

asked Jan 13, 2022 by trwhalen (70 points)
3,434 questions
3,130 answers
546,353 users