0 votes

Is there a way to use the "Super Manager" role and only allow the execution of certain Custom Commands?

Right now I think if I want to do that I need to create a new role with less than "Full Control" on all Objects and then allow the permissions on each object type.

I'm wondering if there is another way to do this without having to go through that. Putting a Deny doesn't seem to work and later I don't want to Deny individual actions.

Can you restrict access to a container or custom commands?

by (790 points)

1 Answer

0 votes
by (226k points)

Hello,

For a specific existing Security Role to grant permissions only to execute specific Custom Commands, you need to remove all the other permissions from the role and then add the permissions for the commands. For information on how to grant permissions to execute Custom Commands, have a look at the following tutorial: https://www.adaxes.com/tutorials_DelegatingPermissions_GrantRightsToExecuteCustomCommands.htm.

For your information, Deny permissions always override the Allow ones. It means that if there is a role assigned to a user allowing them to perform a specific operation (e.g. execute a Custom Command) and another role denying the very same permission, the user will not be able to perform the operation.

Related questions

0 votes
1 answer

Hello, Is it possible to execute a custom command after creating a user, with the intention to prompt the end user for more information? For example we have a User ... would then prompt for a 'Country' to be specified from a param dropdown list. Thanks

asked Mar 10 by bavery (250 points)
0 votes
1 answer

I would like to add the following logic into a Powershell script that will be triggered on 'After Create User'. Read the value of the 'title' property of the user just created ... 'True' or 'False'. Could you assist with how to script this please? Many thanks.

asked May 1, 2020 by Bernie (310 points)
0 votes
1 answer

Hi, I followed this example: https://www.adaxes.com/sdk/IAdmTop6.html, but because the Custom Command is disabled, I get the following error message: System.Management.Automation ... if I enable the Custom Command. I am using Adaxes 2018.2 Best Regards Martin

asked Feb 19, 2020 by Martin (50 points)
0 votes
1 answer

Hello, I have a small question about executing custom commands remotely with powershell. We are now using Adaxes custom commands through orchestrator with remote ... /$UserAD_DN", $NULL, $NULL, 0) $UserAD.ExecuteCustomCommand($command_example) Kr, Serge

asked Oct 12, 2015 by kerremansserge (470 points)
0 votes
1 answer

Is it possible to have custom command that doesn't execute on a specific (or any) AD object? I realize Adaxes is for AD management, but I was wondering if it would be ... to execute against and AD object, I just need it to talk to the SQL server. Thanks

asked Nov 9, 2012 by bemho (520 points)
2,779 questions
2,511 answers
6,574 comments
25,626 users