Restrict ADSeflService access by AD group membership?
Is there a way to restrict access to ADSelfService by AD group membership? I'm aware of the OU restriction option but that is not as easy for us to achieve with our current workflow, I want to restrict terminated user accounts from being able to access during our 30 day retention period where we keep them active prior to complete removal.