Group and OU-based Self-Service Policy Configuration
What are self-service policies?
The self-service policies in ADSelfService Plus govern what self-service features users can avail. These policies have advanced settings which can be configured to apply restrictions on how users use the self-service features.
Group and OU-based Configuration
It is highly likely that not all users in a domain would require similar self-service permissions and restrictions. Keeping it in mind, ADSelfService Plus has an option to configure OU and group-based self-service policies. You can apply self-service policies to a domain or a group or even an OU.
Additionally, you can assign self-service policies to users based on their attributes as well.
Steps to assign self-service policies based on user attributes:
- Navigate to Configuration > Self-Service > Policy Configuration.
- Select the advanced button of the respective policy, and navigate to the General tab.
- Click more and select the Add Filter option.
- Choose an attribute, select the condition (Example: Contains, Starts With, etc.), and enter the value against which the condition has to be checked. (Example: Department Contains Marketing).
- Click the + button to add more conditions if required.
- Click OK to save the settings.
Prioritize Self-Service Policies
You can prioritize self-service policies so that if a group or an OU falls under multiple self-service policies, the self-service policy with the highest priority will take effect.
We will see more about the settings available in the Advanced Policy Configuration next week.
New to ADSelfService Plus?
Related Articles
How to clone existing policies in ADSelfService Plus?
Solution: ADSelfService Plus allows you to configure multiple self-service policies based on users' domains, OUs, and group memberships, and lets you decide which sets of users will have access to what self-service features. You can even clone an ...ADSelfService Plus self-service password reset configuration: Reset & Unlock tab
Reset & Unlock tab The Reset & Unlock tab consists of settings related to the self-password reset and account unlock features. Learn how to configure these settings to suit your requirements. Here are the settings under the Reset & Unlock tab: Unlock ...Password Policy Enforcer configuration
ADSelfService Plus' Password Policy Enforcer enables admins to utilize advanced password policy controls like banning weak passwords and keyboard sequences for users' on-premises AD accounts and cloud accounts, including Microsoft 365 and Google ...Configuring the ADSelfService Plus login agent for machine MFA and password self-service in Linux
Securing data and resources on the corporate network is of paramount importance to organizations. In a world where most corporate attacks originate at an endpoint, ADSelfService Plus offers 20 MFA factors to protect endpoints by allowing access only ...Multi-factor authentication techniques in ADSelfService Plus
Let's take a look into the various authentication methods supported by ADSelfService Plus for enterprise multi-factor authentication (MFA). Why should you use MFA? Authentication based solely on usernames and passwords is no longer considered secure. ...