0 votes

I am using Adaxes to provide self-administration to small groups of users over select areas of the infrastructure. Specifically the management of Windows groups within an OU that requires quick turnaround and has a high volume of change.

The Web UI is very locked down and clean to simplify things and limit what the user can see or do. Everything is working fine, but I'd like to give the users the ability to run reports. However, when I include the reports tab, it defaults to everything being searchable, so a user that is only responsible for half a dozen groups can search the rest of the AD infrastructure and find out who is in what group.

Is there any way to inhibit the reporting scope to only include the OU that the user has responsibility for, and the the rest of AD?

Thanks

by (20 points)

1 Answer

0 votes
by (216k points)

Hello Molly,

In Adaxes, if a user does not have sufficient permissions to view an Active Directory object, the user will not see the object anywhere in Adaxes: neither in the Administration Console, nor in the Web Interface. The same applies to Reports. So, if you hide the unnecessary groups with the help of Security Roles, the users will not see those groups in AD Reports.

For information on how to hide AD objects from users, see the following tutorial: http://www.adaxes.com/tutorials_Delegat ... mUsers.htm.

Also, in Adaxes 2014.1 (to be available by the beginning of 2014) we are going to completely rework the Reports feature. We'll think on how we can provide the possibility to limit the scope of reports for different categories of users.

Related questions

0 votes
1 answer

I'd like to be able to either send an email report or export a CSV of all of the business rules carried out when a user is disabled. This would be ... Management Activity section but this includes things that weren't part of the disable operation. Thanks

asked Feb 19, 2020 by bavery (250 points)
0 votes
1 answer

Since upgrading to 2019.2 I am no longer able to run scheduled reports, either automatically or manually. When looking at the log I see it fails at the "generate report ... is attempting. I can run the report directly with no problem. Can anyone help? Thanks,

asked Nov 21, 2019 by rossb (20 points)
0 votes
1 answer

Is there a way to create a Business Unit that includes all Users in a OU that a Manager is in the ManagedBy field?

asked Mar 21 by dominik.stawny (160 points)
0 votes
1 answer

Hi, is there a way through the Adaxes SDK to check all users against a specific group and determine wether or not they are part of it (must include direct and indirect ... Forrest root domain which holds the group, members of the group can be in every domain

asked Jun 30, 2014 by ijacob (960 points)
0 votes
1 answer

Hi, I'm currently facing a problem where I want to set up a powershell script that should report all accounts (enabled, disabled, expired) matching a specific employeeType ... something else, just the plain Info Can you help me with this? kind regards Ingemar

asked Sep 4, 2015 by ijacob (960 points)
3,326 questions
3,026 answers
7,727 comments
544,684 users