How do I delegate the power to and Assistant Admin to modify the comment field of a group? (NETIQKB55740)

  • 7755740
  • 02-Feb-2007
  • 03-Nov-2011

Environment

Directory and Resource Administrator 8.x

Situation

How do I delegate the power to and Assistant Admin to modify the comment field of a group?

What are the minimum powers that need to be delegated to an Assistant Admin to modify the comment field of a group?

Resolution

To delegate this ability to an Assistant Admin, 2 powers are required:

  • The "View All Group Properties" power
  • A custom power that allows for modifying the "comment" property of the group

To create the custom power:

  • Open up the Delegation and Configuration console logged in as a DRA Admin (or an account that has the ability to create custom powers)
  • Expand Delegation Management and highlight the Powers category
  • Right click the Powers category and select New Power
  • Select the object type as Group and select the Action as Sets the Properties of a Group
  • If so desired, configure addition permissions assigned to the AA, if not, leave this area at its defaults and click Next
  • Check the radio button for Include only listed properties and click Add
  • Add the "comment" property to the power
  • Give the power a name and description and click finish

Once the custom power is created, assign both the custom power and the "View All Group Properties" power to the Assistant Admin from within the Active View



Cause

By default DRA does not have an existing power to spefically manage the comment feild attribute of an AD Group.

Additional Information

Formerly known as NETIQKB55740