What is the Manager (Managers are given powers over their direct reports) rule and how does it work?
Directory and Resource Administrator 6.30
Directory and Resource Administrator 6.30 SP1
Directory and Resource Administrator 6.40
The purpose of the Manager custom rule is to provide a single rule to define many managed objects based on the Active Directory relationship of a Manager to Direct Reports. These fields are available under the Organization tab of a user account's properties in Active Directory. The Manager rule allows management of all accounts configured as Direct Reports for that Assistant Admin.
Because the Manager rule defines only objects to be managed in the ActiveView, you need to assign one or more Assistant Admins and delegate specific roles and/or powers for the ActiveView to be functional.
This is an example of an ActiveView using the Manager rule:
- Define a new ActiveView and add the Custom Rule Manager (Managers are given powers over their direct reports).
- Define Manager1 as an Assistant Admin and delegate the Built-in Helpdesk role.
- Define Manager2 as an Assistant Admin and delegate the power Employee ID - Modify a User Account.
The results would be as follows:
- When Manager1 launches the MMC, the Assistant Admin will be able to see the users defined as its own Direct Reports only. For these specific users, the Assistant Admin will be able to reset passwords, enable or disable accounts, and unlock the user accounts.
- When Manager2 launches the MMC, he Assistant Admin will be able to see the users defined as her Direct Reports only. For these specific users, he Assistant Admin will be able to modify the Employee ID field.
- Neither manager will be able to see the Direct Reports of any other manager (unless these Direct Report accounts have been configured as managed objects in another ActvieView where the manager is an Assistant Admin).