0 votes

We have just rolled out Adaxes and a few of our Help Desk techs (i.e. non-admins) will be responsible for creating the logic behind some customized 'business rules' and 'custom commands' in the Admin console.

I'm guessing we can install just the Admin console to the respective Help Desk tech's workstations to give them access to the 'business rules' and 'custom commands.' When we bind the console to the server hosting the Adaxes Service, can we use the account credentials belonging to the Help Desk technician? The concern is that using our Adaxes service account (which has domain admin rights) to bind the console may grant the Help Desk techs with more access to our AD infrastructure than is appropriate.

by (80 points)

1 Answer

0 votes
by (215k points)

Hello,

Yes, you can install Adaxes Administration Console only without installing the other Adaxes components. For this purpose, on the Select Features step of Adaxes Installation Wizard, you need to unselect all features except the Service Administration Console.

Your helpdesk technicians will be able to log in using their own credentials, and the actions that they can perform will be limited to only the rights granted to them with the help of Security Roles. So, if you want them to be able to modify Business Rules and Custom Commands, you need to grant them the appropriate permissions. However, if you grant the rights to modify Business Rules and Custom Commands to your helpdesk staff, it will be actually almost the same as giving them unrestricted access to your AD. If you grant them such rights, they will be able, for example, to create Custom Commands to modify any property of any AD account, even if they don't have sufficient permissions to modify such a property. Then, they will be able to execute the Custom Command on any AD account they have access to.

Nevertheless, if you would still like to grant rights to modify Business Rules and Custom Commands, we can provide you with instructions on which specific permissions they need.

Related questions

0 votes
1 answer

Is there a command line that would install the admin console and the powershell module silently? we would like to utilize our ConfigMgr system to deploy this app to ... for them to know what modules to install or elevating their user accounts. Thanks!

asked Mar 1, 2017 by ggallaway (300 points)
0 votes
1 answer

I need to install the admin console on several computers when I upgrade to 2013.1. Can I just install the 2013.1 admin console over the 2012.1 console or does it need to ... Adaxes have these? I didn't see this listed anywhere but it's possible I missed them.

asked Apr 30, 2013 by danftasc (440 points)
0 votes
1 answer

We are training our Help Desk to check for proper Office365 licensing before escalating tickets, but I cannot see where to allow "sub-licensing" views (meaning the individual ... those choices in either the Adaxes Admin Console, or the Web Portal? Thank you!

asked Jul 15, 2015 by PunkinDonuts (360 points)
+1 vote
1 answer

I do not want to give my helpdesk personnel Service Administrator access to the Adaxes console. I DO want to give them the permissions to view and change Approval Requests(for ... What permissions do I need to give them to allow them only this access? Thansk!

asked Sep 28, 2012 by mpaul (360 points)
0 votes
1 answer

Running 2018.1 Our helpdesk staff have the Admin Console installed on their workstations with limited permissions granted to their accounts. They are in charge of new user additions ( ... seem to be a way to simply create a new user via Custom Command either.

asked Jul 27, 2018 by bradenmcg (260 points)
2,801 questions
2,535 answers
6,605 comments
61,659 users