0 votes

Hi,

Maybe i'm doing something wrong but i have an issue with permission inheritance :

I have a role (Helpdesk) that gives some users rights to manage Business Units content and to see Business Units objects (in order to get them in Web UI).
I use local security groups for that and it works every scope except BU object.
In order to see BU in Web UI, i have to add explicitely the user account over the BU object.
It happens only for BU objects.

Strange, isn't it ?

by (800 points)

1 Answer

0 votes
by (18.0k points)

Permissions to a local security group can be granted only to AD objects located in the domain of this group. The security role doesn't work because Business Units are not located in your AD domain.

We will investigate how to overcome this restriction, and in the next version it will be possible to grant permissions to local security groups over Business Units and objects from other AD domains.

Thank you for the cooperation!

0

Thanks for the explanation.
Sorry to ask, but do have any information about the next release date ?

0

The next version is scheduled for release in September - October.

Related questions

0 votes
1 answer

What specific permission is needed in a security role to grant access to enable a user account?

asked Dec 7, 2023 by mightycabal (1.0k points)
0 votes
0 answers

Hello, We create home folders using custom command: Service account to perform operations within the domain has: a) domain admin rights b) server admin rights On the ... user as the directory owner, however the user was granted the Take Ownership permission.

asked Mar 15, 2023 by juhota (210 points)
0 votes
1 answer

I know the question is related to an older version, but where do I find the "Thumbnail Photo Part" in Permissions? The task is: A department should be able to change the Userpicture, nothing else. Thanks

asked Nov 24, 2022 by boris (470 points)
0 votes
1 answer

Hallo Everyone I've seen the Report for Exchange Mailboxes with OU, Send on Behalf, Full Rights and Send As Rights: https://www.adaxes.com/questions/ ... . Example: User: Peter.Steinmann Identity: Which Mailboxes AccessRights: FullAccess Kind regards,

asked Jul 6, 2022 by Sandberg94 (340 points)
0 votes
1 answer

Hello, We are currently evaluating Adaxes for our own consulting company and for our customers too. Our setup include AD On Prem with Azure AD Connect which sync new identities to ... start the sync? This part is not in the documentation we found. Thanks a lot

asked May 24, 2021 by ygini (240 points)
3,348 questions
3,049 answers
7,791 comments
545,050 users