Assistant Admins with the power to modify phone numbers cannot modify the Telephone field on the Gen (NETIQKB53400)

  • 7753400
  • 02-Feb-2007
  • 19-Jun-2007

Resolution

fact
Directory and Resource Administrator 7.5

symptom

Assistant Admins with the power to modify phone numbers cannot modify the Telephone field on the General tab of a user account.



symptom

I cannot assign Assistant Admins the ability to modify the Telephone field on the General tab of a user account unless I assign them the ability to modify every attribute on the General tab.



symptom
I am unable to delegate the power to only modify the Telephone field on the General tab of a user account's Properties to an Assistant Admin.

cause

The built-in power to modify phone numbers does not include the ability to modify the Telephone field on the General tab of the Properties for a user account.



fix

To assign the ability to modify the Telephone field of the General tab of a user account's Properties without assigning access to the entire General tab, create a custom power.

To create a custom power to allow the modification of the Telephone field:

  1. Log on to the computer as a DRA Admin or DRA Security Model Admin.
  2. Open the Delegation and Configuration console.
  3. In the left-hand pane, expand Delegation Management.
  4. Right-click Powers and select New Power.
  5. On the Welcome to the Create Power Wizard tab, click Next.
  6. On the Specify the Object Type and Action tab, click Next.
  7. On the Specify Object Properties tab, click Add.
  8. In the Select Properties window, type telephone in the Contains field and click Find Now.
  9. In the Results pane, select telephoneNumber and click Add.
  10. If you want this custom power to include the ability to add multiple telephone numbers, select otherTelephone in the Results pane and click Add.
  11. Click OK.
  12. Click Next.
  13. On the General window, type a descriptive name for the custom power and any additional information in the appropriate fields and click Next.
  14. On the Completing the Power Create Wizard window, clear the I want to delegate this power after I finish this wizard check box and click Finish.

You can now use this custom power by adding it to custom roles or by assigning it to Assistant Admins in an ActiveView.



Additional Information

Formerly known as NETIQKB53400