How do I create an ActiveView to delegate the ability to view all ActiveViews, Roles and Assistant A (NETIQKB18937)

  • 7718937
  • 02-Feb-2007
  • 19-Jun-2007

Resolution

goal
How do I create an ActiveView to delegate the ability to view all ActiveViews, Roles and Assistant Admin configuration?

fact
Directory and Resource Administrator 6.x

fact
Directory and Resource Administrator 7.x

fix

In order to delegate an Assistant Admin the ability to be able to only view the ActiveViews, Roles and Assistant Admins configurations, please perform the following steps:

For DRA 6.x versions:

  1. Launch the Directory and Resource Administrator MMC interface with an account that has, at minimum, DRA Administrator permissions.
  2. Expand the ActiveView management snap-in node.
  3. Select ActiveViews and click New.
  4. Enter a name for the ActiveView and click Finish.
  5. Select Custom rule from list in the Add Objects to ActiveView_name wizard.
  6. Select Include and click Next.
  7. Select Objects managed by ActiveViews from the list in the What type of object does this rule specify? window.
  8. Ensure that all three Advanced options are selected.
  9. Select Name matches <wildname> from the list in the What are the criteria for this object? window.
  10. Click the <wildname> link in the Rule Description window.
  11. With an asterisk (*) in the Name matches: field, click OK.
  12. Enter a name for the rule and click Finish.
  13. Click Assign Assistant Admins in the What would you like to do next? dialogue box.
  14. Click Add users or Add groups.
  15. Select the desired Active Directory object, click Add, and click OK.
  16. Click Next.
  17. Click Add Powers.
  18. Expand the Administration Rules power category.
  19. Select the following powers (or a combination of them that best suits your needs):
  • Nested AV Info
  • Relative Rule Info
  • View ActiveView Properties
  • View Assistant Admin Properties
  • View Power Properties
  • View Role Properties
  • View Rule Properties
  1. Click Add.
  2. Click Next.
  3. Click Finish.

 For DRA 7.x versions: 

  1. Launch the Delegation and Configuration console logged on with an account that has, at minimum, DRA Administrator permissions.
  2. Expand Delegation Management.
  3. Click the New ActiveView icon on the upper toolbar.
  4. Click Next.
  5. On the Rule screen click Add and select Object that matches Rule...
  6. Select ActiveView.
  7. Click OK.
  8. Click Next.
  9. Name the ActiveView and give it a description.
  10. Click Next.
  11. On the summary screen make sure I want to delegate power over this ActiveView is checked.
  12. Click Finish.
  13. Click Next.
  14. On the specify Assistant Admins click the Add button and select User.
  15. Type the name of the desired user in the text box and click Find Now.
  16. Select the user and click Add.
  17. Click OK then click Next.
  18. On the specify Rules and Powers screen click Add then Role.
  19. In the text box type Security and click Find Now.
  20. Select Manage Security Model and click Add..
  21. Click OK.
  22. Right click on Managed Security Model and remove the unwanted powers.
  23. Click Finish.
.


Additional Information

Formerly known as NETIQKB18937