Grant Rights to Execute Custom Commands

To execute Custom Commands, users must be granted appropriate permissions. It is possible to allow or deny the execution of either a specific custom command or all custom commands defined in Adaxes. The rights for Custom Command execution as well as any other rights in Adaxes are granted with the help of Security Roles. This enables you to, for example, allow specific users or groups to perform specific custom commands only on the AD objects located in a specific OU, on the members of a specific group or Business Unit, on all objects located in several AD domains, etc.

In this tutorial, you will learn how to modify the built-in Security Role Help Desk to:

• allow execution of all Custom Commands on all AD object types,
• deny execution of all Custom Commands on Computers,
• deny execution of a specific custom command.

To allow the execution of all Custom Commands on all AD object types, add the Execute All Custom Commands permission applied to All object types.

Step by step

1. In the Result Pane (located to the right), click Add.
   
2. Select All object types and check the Execute All Custom Commands permission in the Allow column. Click OK
   

To deny execution of all Custom Commands on Computers, deny the Execute All Custom Commands permission for the Computer object type.

Step by step

1. In the Result Pane (located to the right), click Add.
   
2. Select Computer in the list of object types and check the Execute All Custom Commands permission in the Deny column. Click OK.
   

To deny execution of the custom command 'My Command', deny the Execute 'My Command' permission for the corresponding object type.

Step by step

1. In the Result Pane (located to the right), click Add.
   
2. Select an object type, on which the Custom Command can be executed and check the Execute 'My Command' permission in the Deny column. Click OK.