0 votes

I'm unable to Browse the AD OUs my Security Role Trustee is Assigned Over in my Custom Web Portal. When clicking Browse it states "No objects to display". How can I rectify this issue?

by (350 points)

1 Answer

0 votes
by (215k points)

Hello,

For users to be able to browse an OU or Container in your Active Directory, they need to be able to read not only the OU/Container they need to manage, but also all OUs/Containers that the managed OU is a child of up to the root domain object. For example, if you want to allow your users to browse the Minnesota Office OU that is located in the example.com domain under Offices/US Offices, you need not only to grant the permissions for the Minnesota Office OU, but also grant at least the Read permissions for the Offices and US Offices OUs, and also for the example.com domain. By default, the permission to read all objects is granted by the built-in Security Role that is called Domain User. However, if you chose to remove the default assignment of this role and grant the Read permission on a more granular level, take a look at the Hide Active Directory Objects from Users tutorial on how to allow your users to see only the objects they need.

Related questions

0 votes
1 answer

We have four OUs in Active Directory (Pending Deletion, Disabled with Mail Delegates, Disabled with HR Extensions and Disabled_Temp_Leave) that users are moved to prior to their eventual ... past 7 days have been moved to one of 4 of these OUs. Thanks!

asked Jun 3, 2021 by RayBilyk (220 points)
0 votes
1 answer

Hi We're experiencing some issues with showing and hiding custom commands when viewing user accounts. We have a number of commands in Adaxes, but no matter the permissions ... other custom commands shown. We're running the latest verison of 2021.1 Thanks Matt

asked Apr 5 by chappers77 (1.2k points)
0 votes
1 answer

We are in the process of implementing LAPS in our environment. Is there an option / way to get the password from the Adaxes web portal?

asked Jun 15, 2020 by peggleg (110 points)
0 votes
1 answer

I am wanting to export a list of users including the properties of a specific custom attribute. Ideally, I would be able to run a get-admuser and filter on a custom attribute, but even an excel report with the custom attributes would work. Is this possible?

asked Sep 9, 2021 by ggallaway (300 points)
0 votes
1 answer

I'd like to create a a custom report to show any approval requests (Approved, Pending, and Rejected) for membership in certain AD groups within our domain. These groups grant users ... " (Just In Time) in the name of the group. Is something like this possible?

asked Mar 30, 2020 by sirslimjim (430 points)
2,807 questions
2,541 answers
6,615 comments
65,716 users