Group and OU-based Self-Service Policy Configuration
What are self-service policies?
The self-service policies in ADSelfService Plus govern what self-service features users can avail. These policies have advanced settings which can be configured to apply restrictions on how users use the self-service features.
Group and OU-based Configuration
It is highly likely that not all users in a domain would require similar self-service permissions and restrictions. Keeping it in mind, ADSelfService Plus has an option to configure OU and group-based self-service policies. You can apply self-service policies to a domain or a group or even an OU.
Additionally, you can assign self-service policies to users based on their attributes as well.
Steps to assign self-service policies based on user attributes:
- Navigate to Configuration > Self-Service > Policy Configuration.
- Select the advanced button of the respective policy, and navigate to the General tab.
- Click more and select the Add Filter option.
- Choose an attribute, select the condition (Example: Contains, Starts With, etc.), and enter the value against which the condition has to be checked. (Example: Department Contains Marketing).
- Click the + button to add more conditions if required.
- Click OK to save the settings.
Prioritize Self-Service Policies
You can prioritize self-service policies so that if a group or an OU falls under multiple self-service policies, the self-service policy with the highest priority will take effect.
We will see more about the settings available in the Advanced Policy Configuration next week.
New to ADSelfService Plus?
Related Articles
How to resolve the "Permission Denied" error in ADSelfService Plus
To resolve the Permission Denied error in ADSelfService Plus, you need to ensure that the respective users are part of the selected OUs or Groups in the policy configuration. To do this, please follow the steps below: Log in to ADSelfService Plus as ...How to enable offline MFA in ADSelfService Plus
ManageEngine ADSelfService Plus supports offline multi-factor authentication (MFA) for Windows machine logins, User Account Control (UAC) prompt elevation, and Remote Desktop Protocol (RDP) server authentication when the product server is ...ADSelfService Plus product startup issues
What do you need to know before troubleshooting You need to have administrator access to ADSelfService Plus. When you experience an error with ADSelfService Plus, check if these prerequisites are satisfied: Install ADSelfService Plus as a service ...Troubleshooting Guide for Common Errors in ADSelfService Plus End User Portal
Permission denied. Please contact your administrator. Cause: There are two reasons why this error could occur: End users trying to access any of the self-service features in ADSelfService Plus such as password reset or directory self-update need to ...How to enable self-update for custom AD attributes in ADSelfService Plus
IT administrators might need to create custom attributes for a variety of reasons such as to route Active Directory based custom messages, application integration, or including specific flags on Active Directory objects. Before you can create a ...