Fields appear greyed out for the technician while creating or modifying Active Directory users using ADManager Plus
Issue description
In ADManager Plus, help desk technicians may notice that certain user fields in the creation or modification template appear greyed out, restricting them from editing these attributes. However, these fields remain visible and editable when logged in as an administrator.
This behavior occurs because attribute-level delegation is in place, allowing administrators to precisely control which attributes technicians can manage. Attributes not included in the technician's delegated scope are automatically restricted, ensuring secure and controlled access to sensitive user information.
Possible cause
Insufficient delegation permissions: The assigned help desk role does not have access to modify or configure user attributes under bulk user creation/modification.
Prerequisites
Ensure you have superadmin access to ADManager Plus.
Resolution
Step 1: Verify the technician's privileges
- Log into ADManager Plus using the admin account.
Navigate to Delegation > Help Desk Roles .
Identify the role assigned to the technician and click Edit.
Navigate to the User Attribute Privileges tab.
Under the Bulk User Modification tab, configure the necessary fields.
Ensure that all required attributes are checked for modification.
Click Save to apply the modifications.
Have the technician log out and log back in to check if the fields are now accessible.
Tips
Verify delegation settings to ensure the technician's role has the necessary permissions.
Log out and log back in for the changes to take effect.
How to reach support
If the issue persists, contact our support team here.New to ADSelfService Plus?
Related Articles
Failed to create Active Directory users using ADManager Plus due to an "Access Denied" error
Issue description When attempting to create a user in AD using ADManager Plus, the process may fail with an Access Denied error message. This error typically indicates insufficient permissions or delegation issues, preventing the successful addition ...A technician is unable to delete an Active Directory user account using ADManager Plus but the same is possible from ADUC console.
ADManager Plus, an IGA tool, offers purpose built features for Active Directory (AD), Microsoft 365, Exchange, and Google workspace management and reporting operations. To successfully perform the required operation in these platforms, ADManager Plus ...How to configure Active Directory integration with monday.com using ADManager Plus
Objective This article explains how to integrate monday.com with ManageEngine ADManager Plus to enable seamless Active Directory actions using APIs. With this setup, IT administrators can synchronize your user accounts, manage permissions, and ...Why is my Active Directory backup failing when using ADManager Plus?
Issue description Users may encounter backup failures when using ADManager Plus, with messages like Failed: [Invalid Credential] or Failed: [DC Not Operational] appearing in the Backup Summary section. As a result, scheduled or manual backups of ...Microsoft 365 license management using ADManager Plus
This article will explain how you can assign and revoke Microsoft 365 licenses using ADManager Plus. With ADManager Plus, you can: Assign Microsoft 365 licenses while creating users. Modify Microsoft 365 licenses for existing users. Remove Microsoft ...