0 votes

I'd like to allow users to remove themselves from groups that they are already members of. Currently I have a business rule in place thats only allowing the OU Owners to remove users from the groups within their OU but I'd like to extend this to allow the users themselves to remove themselves from groups too.

image.png

Is there a condition I could add to this business rule that would accomplish this? Something like -

'If inititating user is a member of the adm-groupname' then allow then to remove themselves.

by (1.7k points)

1 Answer

0 votes
by (410 points)

Hello,

To allow users to remove themselves from groups, you need to add the If the initiator is not %member% condition to your Business Rule and join it with the existing condition using the AND operator. The Business Rule itself should look like this: image.pngWhen the Business Rule triggers, the %member% value reference will resolve into the DN of the user who is being removed from the group.

Also, users need to have the rights to modify the Member property of group objects to be able to remove themselves from groups.

Related questions

0 votes
1 answer

If I have 2 Active Directory Security groups in my domain - Group A Group B Is it possible to create a report that shows only users who have membership in both groups? For ... Jane Doe is in Group A AND Group B she would be included in the resulting report.

asked May 11 by sirslimjim (1.7k points)
0 votes
0 answers

I'd like to implement an architecture whereby all Domain Users can request membership in any domain security group. I'd also like to allow the OU Owners to have ... from their groups without granting them the ability to remove users from all security groups?

asked Mar 25 by sirslimjim (1.7k points)
0 votes
1 answer

Hi All, I was following the following documentation https://www.adaxes.com/tutorials_DelegatingPermissions_GrantRightsToModifyADGroupMembership.htm However I cannot work out how to make it ... can only add themselves. Any help would be great. Many Thanks

asked Mar 30 by antondubek (1.5k points)
0 votes
1 answer

I'd like to be able to either send an email report or export a CSV of all of the business rules carried out when a user is disabled. This would be ... Management Activity section but this includes things that weren't part of the disable operation. Thanks

asked Feb 19 by bavery (250 points)
0 votes
1 answer

Hello, Is it possible to grant members of a business unit permission to run a custom command? I know I'm able to give permission to a user/group to run a cmd on a business ... that can run the command. I've not been successful with any of my attempts to do so.

asked Mar 23, 2017 by JoCCCsa (510 points)
2,183 questions
1,948 answers
5,392 comments
5,258 users