How do I limit an Assistant Admin to create groups of a specific scope and/or type only? (NETIQKB41082)

goal
How do I limit an Assistant Admin to create groups of a specific scope and/or type only?

fact
Directory and Resource Administrator 7.x

fix

Limiting what group type an Assistant Admin can create can be accomplished by managing the group by Type and Scope through Active View. 

When you create a Group Rule, you can limit the Type and Scope of the group rule by following these steps:

1. Open the Delegation and Configuration Console.
2. Expand ActiveView Management | ActiveViews.
3. Double click on the ActiveView in question.
4. Click on the Rules tab.
5. Click Add and select Object that matches a Rule...
6. Select Groups.
7. Right click on Any Group and select Manage Group by Type and Scope.
8. Under Group Scope Options and Specific Group Scopes select the desired group scope.
9. Under Group Type Options select the desired group type and click OK.
10. Click OK.
11. Click OK again to finish.

 

Formerly known as NETIQKB41082