Group and OU-based Self-Service Policy Configuration
What are self-service policies?
The self-service policies in ADSelfService Plus govern what self-service features users can avail. These policies have advanced settings which can be configured to apply restrictions on how users use the self-service features.
Group and OU-based Configuration
It is highly likely that not all users in a domain would require similar self-service permissions and restrictions. Keeping it in mind, ADSelfService Plus has an option to configure OU and group-based self-service policies. You can apply self-service policies to a domain or a group or even an OU.
Additionally, you can assign self-service policies to users based on their attributes as well.
Steps to assign self-service policies based on user attributes:
- Navigate to Configuration > Self-Service > Policy Configuration.
- Select the advanced button of the respective policy, and navigate to the General tab.
- Click more and select the Add Filter option.
- Choose an attribute, select the condition (Example: Contains, Starts With, etc.), and enter the value against which the condition has to be checked. (Example: Department Contains Marketing).
- Click the + button to add more conditions if required.
- Click OK to save the settings.
Prioritize Self-Service Policies
You can prioritize self-service policies so that if a group or an OU falls under multiple self-service policies, the self-service policy with the highest priority will take effect.
We will see more about the settings available in the Advanced Policy Configuration next week.
New to ADSelfService Plus?
Related Articles
How to clone existing policies in ADSelfService Plus?
Solution: ADSelfService Plus allows you to configure multiple self-service policies based on users' domains, OUs, and group memberships, and lets you decide which sets of users will have access to what self-service features. You can even clone an ...ADSelfService Plus self-service password reset configuration: Reset & Unlock tab
Reset & Unlock tab The Reset & Unlock tab consists of settings related to the self-password reset and account unlock features. Learn how to configure these settings to suit your requirements. Here are the settings under the Reset & Unlock tab: Unlock ...How to resolve the "Permission Denied" error in ADSelfService Plus
To resolve the Permission Denied error in ADSelfService Plus, you need to ensure that the respective users are part of the selected OUs or Groups in the policy configuration. To do this, please follow the steps below: Log in to ADSelfService Plus as ...Password Policy Enforcer configuration
ADSelfService Plus' Password Policy Enforcer empowers administrators to implement advanced password policy controls, such as banning weak passwords and disallowing keyboard sequences, for users' on-premises AD accounts and cloud accounts, including ...How to enable offline MFA in ADSelfService Plus
ManageEngine ADSelfService Plus supports offline multi-factor authentication (MFA) for Windows machine logins, User Account Control (UAC) prompt elevation, and Remote Desktop Protocol (RDP) server authentication when the product server is ...