Adaxes

Blind users role and add to group problem

0 votes

Hi again,

It seems that there is a problem with the Blind Users role and the add to group features : i configured a user as he can see only a specific OU through blind users role (everyone with full scope and an exception for this user on the OU).
I can browse for a group through the Web UI and then add a new member, but if i want to use the add to group, i can select the user first but when i click next, the Web UI return "There are no groups to add 'My User' to." (Where My User stands for the real user name obviously).

Am i doing something wrong ?

by (800 points)

1 Answer

0 votes
by (216k points)

Hi,

It seems that there is a problem with the Blind Users role and the add to group features : i configured a user as he can see only a specific OU through blind users role (everyone with full scope and an exception for this user on the OU).
I can browse for a group through the Web UI and then add a new member, but if i want to use the add to group, i can select the user first but when i click next, the Web UI return "There are no groups to add 'My User' to." (Where My User stands for the real user name obviously).

It seems that you configured the "Add to Group" action to display groups of specific types (see attachment) and the OU doesn't contain groups of the specified type.

0

No, on this page, i have only the radio buuton "Allow the user to select groups" and no checkbox checked.

Another idea ?

by (800 points)
0

It's strange,
We can't reproduce such a problem in our environment.

Lets make sure that I understood your case correctly.
1. You have the following structure in the Active Directory
OU1
-User1
-User2
...
-UserN
-Group1
-Group2
...
-GroupN
2. You add the following assignments to the Blind User Role:

  • Everyone over All Objects
  • Exclude User1 over OU1
  1. You sign in as User1 to the Adaxes Web Interface, here you can see all groups when you browse the OU1, but when you select 'Add to Group' action, on the Step 2 you receive the message "There are no groups to add 'User1' to."
by (216k points)
0

That's it

by (800 points)
0

We have reproduced this problem in our environment, it will be fixed in the next service pack, sorry for inconvenience.

by (216k points)
0

Today we released a new build of Adaxes that fixes this bug.
You can download the new build here.
Thanks for the bug report!

by (216k points)

Related questions

0 votes
1 answer
Blind users role and default container

Hi there ! I use the blind users role to hide objects to web operators but it seems that default containers (builtin, computers, users) are always visible, when i use group ... rights to edit these objects, i'd like these to be really hidden. Any clue ?

asked Jul 18, 2011 by sroux (800 points)
0 votes
1 answer
Blind user role and configuration object

Hi, Still struggling with blind user role :-) i found out that i cannot exclude configuration object from the role (this is greyed) so users cannot use "My Approval" "My requests" features Is this normal ? TIA

asked Jul 21, 2011 by sroux (800 points)
0 votes
1 answer
Is it better to grant access via multiple OU and group assignments in the security role or use a business unit?

I have 18 domains managed by Adaxes and have noticed that Admin (full access) t all objects acts normally, but for piecemeal scopes like Service Desk that scopes to individual ... role (including 16 denies) and expect it to grow as we add more domains.

asked Sep 20, 2022 by DA-symplr (80 points)
0 votes
1 answer
Can't add on-prem users to Azure AD group

We have a Hybrid enviroment where our On-Prem AD is leading. We also have cloud only groups. Now I need to give key users rights to manage the memebership of the cloud ... cannot select the On-Prem domain. The option is greyed out. Am I missing something?

asked Jan 30 by a.blonk (170 points)
0 votes
1 answer
Add users to group

Hello, I try to run following powershell code from Script Repository "Add users to group in bulk". I always get the message "User TestUser1 was not found" ... Custom Command should run in every Managed Domain with the configured Service Account. regards Helmut

asked Feb 9, 2021 by a423385 (510 points)
3,351 questions
3,052 answers
7,791 comments
545,079 users