+1 vote

I do not want to give my helpdesk personnel Service Administrator access to the Adaxes console. I DO want to give them the permissions to view and change Approval Requests(for ALL) and view access to everything in Logging. What permissions do I need to give them to allow them only this access? Thansk!

by (360 points)

1 Answer

0 votes
by (216k points)

Hello Michael,

Unfortunately, currently you cannot access Logging from the Adaxes Web Interface. This feature is in our TODO list.

As a workaround, you may access log records using a PowerShell script. See the section called Get Adaxes Log Records Using Script in the View AD Operations Performed via Adaxes Tutorial and also the Accessing Log Records article in the Adaxes SDK.

Also, you cannot allow a user who is not an Adaxes administrator to view ALL approval requests. Users who are not administrators can view only their Approval Requests (i.e. the requests either initiated by them or assigned to them). As a workaround, you may create a Scheduled Task that will add people from the helpdesk staff to the list of Approvers of an Approval Request if the Approval Request remains pending for X days/hours.

0

Please add these to your enhancement request list. You have other permission settings to allow users to manage parts of the configuration. We should be able to delegate Approval Request Review/Modifications and Logging to non-console administrators. Thanks!

0

Michael,

As for Logging, this is already in our TODO list. I've added +1 to that one.

As for delegating permissions to view Approval Requests of other Approvers, thank you for the proposal. I've added this to our TODO list.

0

You can add another +1 to integrating the logs into the web console. That is a feature we would love to have.

0

Done. We plan to have it available in the very beginning of 2013.
Thanks.

0

Michael,

I have a question regarding Approval Requests. If you want your Help Desk team to be able to approve/deny requests, why don't you add them to the list of approvers?

0

I want them to be able to review and add(should someone be on vacation for example) approvers to existing pending approvals. I do not wish them to be part of the original approval process. Thanks!

0

OK, point taken. Thanks for the explanation.

Related questions

0 votes
1 answer

How to grant someone access to see logging in Adaxes Admin Console?

asked Nov 30, 2022 by sra98a (120 points)
0 votes
1 answer

Is there a command line that would install the admin console and the powershell module silently? we would like to utilize our ConfigMgr system to deploy this app to ... for them to know what modules to install or elevating their user accounts. Thanks!

asked Mar 1, 2017 by ggallaway (300 points)
0 votes
1 answer

We are training our Help Desk to check for proper Office365 licensing before escalating tickets, but I cannot see where to allow "sub-licensing" views (meaning the individual ... those choices in either the Adaxes Admin Console, or the Web Portal? Thank you!

asked Jul 15, 2015 by PunkinDonuts (360 points)
0 votes
1 answer

We have just rolled out Adaxes and a few of our Help Desk techs (i.e. non-admins) will be responsible for creating the logic behind some customized 'business rules ... may grant the Help Desk techs with more access to our AD infrastructure than is appropriate.

asked May 3, 2013 by avfasi (80 points)
0 votes
1 answer

I turned on the option to have "Approve" and "Deny" links sent in the approval request email. It seems to not be working through. Here is a screenshot of what it ... the link. I also tried using incognito mode in chrome. Same look. Appreciate the assistance!

asked Mar 29, 2021 by mark.it.admin (2.3k points)
3,326 questions
3,026 answers
7,727 comments
544,678 users