Delegation based on department or similar AD attributes
Hi,
We have around 5000 users. Unfortunately due to AD container creation restriction we have all the user put in one container. (Due to Global restrictions)
We cannot create additional containers to delegate efficiently.
�Please find my below possible solution and kindly advise us if this is something that we can achieve from your product�
We can use one of the active directory fields as our common department number allocation. E.g. Department = H1234-XX while a different department can be H222-XX.
XX is unique within each department.
The benefit of the above solution is I can search and update users based on departments. With current AD Manager PLUS, when a Helpdesk person logs in and tries to modify telephone number of a user, he gets to see all 5000 users (All users from other department).
Can you please advise us if there is any way we can restrict helpdesk roles based on departments or something similar. So helpdesk person from one department should not have access to modify objects from other department all being done from the same OU.
Many Thanks,
Kind Regards,
We have around 5000 users. Unfortunately due to AD container creation restriction we have all the user put in one container. (Due to Global restrictions)
We cannot create additional containers to delegate efficiently.
�Please find my below possible solution and kindly advise us if this is something that we can achieve from your product�
We can use one of the active directory fields as our common department number allocation. E.g. Department = H1234-XX while a different department can be H222-XX.
XX is unique within each department.
The benefit of the above solution is I can search and update users based on departments. With current AD Manager PLUS, when a Helpdesk person logs in and tries to modify telephone number of a user, he gets to see all 5000 users (All users from other department).
Can you please advise us if there is any way we can restrict helpdesk roles based on departments or something similar. So helpdesk person from one department should not have access to modify objects from other department all being done from the same OU.
Many Thanks,
Kind Regards,