0 votes

We are using Adaxes 3.3.8507 to create users, with patterns and rules etc, from the Web page. Only users of our Help Desk can do this and we don't require approval. Everything works fine.

But

We would like to create a variation of this. We would like the departmental managers to be able to go to the web site and create a "new user request" that would come to the IT department and be reviewed before creation.

Can you have 2 different create user commands?

or

It could only be just a request and we would re-enter the data in our own "Create User" command. This might be the simplest. It would be good to use Adaxes to create a number of different forms that would generate requests. The property patterns etc are very useful.

by (2.9k points)

1 Answer

0 votes
by (19k points)

Hello,

Adaxes allows requesting an approval for any operation performed in Active Directory. For details, please see

0

Perhaps I didn't explain myself fully. I am asking can the same command behave differently depending on which web module it is executed in? Helpdesk or Self Service?

I have reviewed the demos, they don't cover this area.

Secondly I am asking can Adaxes be used just to create requests that have no furhter action?

0

Hello,

The following will allow to send all users created from the Create User Home Page Action in the Self Service Web Interface for approval:

  1. On the computer, where the Web Interface is installed, start the Web Interface Customization tool.

  2. In the Interface type drop-down list, select Self Service.

  3. Activate the General tab, uncheck the Do not show the Home Page option, select the Actions pane option, and click Configure Home Page Actions.

  4. Click the Add button located at the bottom of the Home Page Actions dialog.

  5. Select the Create New action and choose the User object type.

  6. On the 4th step of the Add Home Page Action wizard, click Add in the Predefined Fields section.

  7. In the Add Default Property Value dialog box that appears, select Show all properties and choose CustomAttributeText3 in the Property name field.

  8. Type Self-Service in the Default value field, then click OK and Finish.

  9. Create the following Business Rule that will activate before creating a User:

    The text of the script in the Run PowerShell Script action should be as follows:

     $Context.TargetObject.PutEx("ADS_PROPERTY_CLEAR", "adm-CustomAttributeText3", $NULL)

After you complete these steps, a new action called Create User will appear on the Self Service Web Interface.

All users created with the help of this Home Page Action will be assigned Adaxes custom property CustomAttributeText3 with the value of this property equal to Self-Service. As the action was configured for the Self Service Web Interface only, this will not affect the other Web Interface types. The Business Rule will look for this property, and, if it is equal to Self-Service, it will send the Create User operation for approval and clear the property.

Another option is to send an email containing the required properties of the user to the approver and cancel the operation. The approver will have to re-enter the user manually again. To do this, you need to perform all the steps as described above, but the Business Rule will be different:

Here, you can use value references to specify the necessary information about the user in the text of the email. See Value Reference Format. Here's a small example of what such an email can contain:

Dear Administrator,

Please, create the following user account:
User Name: %username%
First Name: %firstname%
Last Name: %lastname%
Department: %department%
Title: %title%
E-mail: %mail%

Regards, %adm-InitiatorFullName%

Related questions

0 votes
1 answer

Hi, I'd like to enable users to be able to request distribution group creation. We have two Containers: Public Distributions Managed Distributions In public, this is the ... custom command must be defined just for this option, that could work too. Thanks!

asked Jul 19, 2012 by Legit (850 points)
0 votes
1 answer

Adaxes seems to want to use the Manager field to specify who gets approval confirmation emails. What do you do about a user without a manager, such as the CEO? Let's assume they're not tech saavy, and the IT department needs to confirm their requests.

asked Feb 10 by Liam (250 points)
0 votes
1 answer

It's possible to integrate ADAXES with HR Solution to create user in active directory ?

asked Feb 14 by babid (250 points)
0 votes
1 answer

Hi, I have a "Create User" Action on the Helpdesk webpage. It's used to create an External IT user in a specific OU. a propery pattern is doing all the work, everything is fine ... how to show this checkbox in the web form... How could this be made? :) Thanks

asked Oct 1, 2019 by dkkela (510 points)
0 votes
1 answer

Hello, I have an LDAP filter on a home page action : (& (objectClass = organizationalUnit) (name = * Users)) But nothing appears When I do the search from the console with my filter, it works: the OU Users * did not directly at the domain root

asked Dec 14, 2011 by mmichard (3.7k points)
2,352 questions
2,106 answers
5,746 comments
127,291 users