Objective   

Organizations often manage help desk access based on AD group membership to simplify permission management. Assigning roles to groups in ADManager Plus helps ensure that all members inherit the same delegated permissions automatically. This approach is especially useful when onboarding new technicians or managing role-based access at scale.

Prerequisites 

• You must be logged in as an admin or a technician with permissions to assign roles to other technicians.

• The group of AD users (e.g., help desk team) must already exist in Active Directory.

• Required technician roles must be created in the Help Desk Roles section.

Steps to follow 

1. Log in to ADManager Plus.

2. Go to Delegation > Help Desk Delegation > Help Desk Technicians.

3. Click Add New Technicians.

4. Under Select Domain, choose the domain you want to work with.

5. In Select AD Users / Groups, switch to the Groups tab and select the AD groups containing the users to whom you want to assign help desk roles (multiple groups or users can be selected). Click OK.

6. In Select Help Desk Roles, choose the role you want to delegate.

7. In Select OUs, define the domain and OU scope to control which objects the group can manage.

8. Click Save to apply the delegation.

Tips   

• Assign roles to groups only if all members need the same level of access.

• Review group permissions regularly to prevent unnecessary or excessive privileges.

• Create separate groups for different access levels and assign roles accordingly.

• Use ADManager Plus reports to track and audit activities performed by group-based technicians.