Allow Users to Modify Specific Properties of Their Accounts
By default, all users are allowed to modify certain properties of their own accounts. This permission is granted by the built-in Security Role called User Self-Service. This role allows users to modify only the properties that belong to the Personal Information and Web Information property sets.
Personal Information property set
| Property | LDAP Name |
|---|---|
| Assistant | assistant |
| Notes | info |
| Picture | thumbnailPhoto |
| Personal Title | personalTitle |
| Street Address | streetAddress |
| Home Address | homePostalAddress |
| Country | c |
| Country Code | countryCode |
| Country Name | co |
| City | l |
| Office | physicalDeliveryOfficeName |
| P.O.Box | postOfficeBox |
| Home Address | postalAddress |
| Zip/Postal Code | postalCode |
| Registered Address | registeredAddress |
| State/Province | st |
| Street | street |
| Preferred Delivery Method | preferredDeliveryMethod |
| Telephone Number | telephoneNumber |
| Telephone Number (Other) | otherTelephone |
| Mobile Phone | mobile |
| Mobile Phone (Other) | otherMobile |
| Home Phone | homePhone |
| Home Phone (Other) | otherHomePhone |
| Fax | facsimileTelephoneNumber |
| Fax (Other) | otherFacsimileTelephoneNumber |
| IP Phone | ipPhone |
| IP phone (Other) | otherIpPhone |
| Pager | pager |
| Pager (Other) | otherPager |
| International ISDN Number | internationalISDNNumber |
| Primary Telex Number | primaryTelexNumber |
| Telex Number | telexNumber |
| MSMQ Digests | mSMQDigests |
| MSMQ Sign Certificates | mSMQSignCertificates |
| Primary ISDN Number | primaryInternationalISDNNumber |
| Teletex Terminal Identifier | teletexTerminalIdentifier |
| User Certificate | userCertificate |
| User-Cert | userCert |
| User Shared Folder | userSharedFolder |
| User Shared Folder (Other) | userSharedFolderOther |
| User SMIME Certificate | userSMIMECertificate |
| X121 Address | x121Address |
Web Information property set
| Property | LDAP Name |
|---|---|
| Web Page | wWWHomePage |
| Web Page (Other) | url |
In this tutorial you will learn how to grant regular users the rights to modify specific properties of their own accounts, and how to configure Web Interface to allow users to edit those properties.
Grant Permissions
To allow users to modify properties of their own accounts, you need to add corresponding permissions to the built-in Security Role User Self-Service.
- Select User in the list of object types, to which permissions are applied.
-
Check the Allow option for the desired property in the
Property-specific permissions section. For example, to allow modifying the
Title property, check the Allow check box for the
Write 'Title' Property permission.
If the property you need is not available in the Property-specific permissions section, enable the Show all properties option.
Customize Web Interface
The Web Interface for Self-Service
allows users to modify only the properties for which they have the Write permission by default.
If you want users to be able to modify other properties, you need to customize the form used to
edit user accounts in the Web Interface.
To add a property to the Edit User form:
Customize Forms for User Creation and Editing.
