What are the minimum powers required to create computer accounts in Directory and Resource Administrator (DRA)?
Directory and Resource Administrator 6.x
Directory and Resource Administrator 7.x
In order for the Assistant Admin to create computer accounts within DRA, they would need either the Built-in ResourceCreate role or the All properties-Create a computer account power.
In addition, verify that the assigned ActiveView includes the following rules:
- A custom rule to include all computers.
- A rule for target container for create operations.
Optionally, you could add a rule to exclude all Domain Controllers if the intent is to not allow the Assistant Admins to see Domain Controllers.