0 votes

what kind of security role and permissions would I need to set up for our HR director to access the web interface so that she can do the following

  • update user contact info including
    • phone numbers
    • title
    • direct reports
    • manager
by (20 points)

1 Answer

+1 vote
by (3.6k points)

Hello,

You will need to create a Security Role which grants permissions to modify specific properties of AD objects and assign the role to the HR director. The assignment scope has to include all users that you would like the HR director to be able to modify. For information on how to do this, please, have a look at the following tutorial https://www.adaxes.com/tutorials_DelegatingPermissions_GrantRightsToModifySpecificProperties.htm.

In the Security Role you need to add the Allow Write permissions for the following properties:

  • Any of the phone number properties, which by default include Telephone Number, Mobile Phone, Home Phone, IP Phone, Telephone Number (Other), Mobile Phone (Other), etc.
  • Job Title property.
  • Manager property.

The Direct Reports property contains backlinks to the user objects for which the account is specified as Manager. The property is managed by Active Directory and cannot be edited manually. For each user that you would like to be a direct report of someone, you need to edit their Manager property.

For information on how to allow the HR director to access a specific Web Interface, please see https://www.adaxes.com/tutorials_WebInterfaceCustomization_AllowDenyAccessToTheWebInterface.htm.

Related questions

0 votes
1 answer

Hello, A new question : when I create a new contact in Adaxes, I'd like the email address automatically created. How can I do this ? Thanks for your response. Yoann

asked Oct 15, 2012 by yoann.hamon (180 points)
0 votes
1 answer

Hi Currently we have an Adaxes system set up for our Service Desk staff to log into and manage users / groups etc this is currently assigned by assigning the Service ... there be any limiting factors such as licencing requirements for this? Thanks in advance.

asked Dec 15, 2020 by R_C (70 points)
0 votes
0 answers

Hi Evryone, I am trying to set up an external portal within a new webserver on dmz, and with only access to a webservice created from selfservice. The new webservice is only ... login, only reset password. What I am mising there that its not working? Thanks,

asked Nov 26, 2021 by yagoityd (20 points)
0 votes
1 answer

Hi there, we are already successfully using the password self service via webinterface for our ad domain users. In addition to this are we in the testing phase of the password ... has the same problem and maybe can report how they solved it. Thanks in advance.

asked Oct 27, 2021 by khess (20 points)
0 votes
1 answer

Have this half figured out, but can't remember where I found the instructions. I want to put a drop down list on the specific Create User form I created for our Help ... was selected in the custom attribute and make an email address. Thanks for the help again

asked Feb 5, 2013 by jiambor (1.2k points)
3,326 questions
3,026 answers
7,727 comments
544,681 users