Fields appear greyed out for the technician while creating or modifying Active Directory users using ADManager Plus

Fields appear greyed out for the technician while creating or modifying Active Directory users using ADManager Plus

Issue description   

In ADManager Plus, help desk technicians may notice that certain user fields in the creation or modification template appear greyed out, restricting them from editing these attributes. However, these fields remain visible and editable when logged in as an administrator.

This behavior occurs because attribute-level delegation is in place, allowing administrators to precisely control which attributes technicians can manage. Attributes not included in the technician's delegated scope are automatically restricted, ensuring secure and controlled access to sensitive user information.

Possible cause

  1. Insufficient delegation permissions: The assigned help desk role does not have access to modify or configure user attributes under bulk user creation/modification.

Prerequisites   

  • Ensure you have superadmin access to ADManager Plus.

Resolution   

Step 1: Verify the technician's privileges

  1. Log into ADManager Plus using the admin account.
  2. Navigate to Delegation > Help Desk Roles  .

  3. Identify the role assigned to the technician and click Edit.

  4. Navigate to the User Attribute Privileges tab.

 

  1. Under the Bulk User Modification tab, configure the necessary fields.

  2. Ensure that all required attributes are checked for modification.

  1. Click Save to apply the modifications.

  2. Have the technician log out and log back in to check if the fields are now accessible.

Tips  

  • Verify delegation settings to ensure the technician's role has the necessary permissions.

  • Log out and log back in for the changes to take effect.

How to reach support 

If the issue persists, contact our support team here

                  New to ADSelfService Plus?