There is no way to change the ADAM Admin group after it has been set (NETIQKB70529)

  • 7770529
  • 19-Jul-2007
  • 27-Feb-2008

Environment

Directory and Resource Administrator 8.1

Situation

How do I change the ADAM Admin group once it's been set?

Can the ADAM Admin group specified during installation be changed later?

How do I change the ADAM Adming group in the DRA GUI?
There is no way to change the ADAM Admin group after it has been set in the GUI.

The ADAM Admin group cannot be changed in DRA once set.

Resolution

The ADAM Admin group cannot be changed in the GUI once initially set in Directory and Resource Administrator (DRA) 8.1.  An Enhancement Request has been opened with Development to include this functionality in a future version of Directory and Resource Administrator.

However, the ADAM Admin group can be changed outside of the GUI following these steps:

  1. Launch ADAM ADSI edit and connect to the configuration partition
  2. Expand the CN=Roles node
  3. Find and right-click the Adminsitrators role and select Properties
  4. Find the Member attribute in the list and click Edit
  5. Click on Add Windows Account and add the new group that you want to give rights to ADAM

Ensure that the DRA service account and any/all override account are in the newly specified Adam Admin group and restart the NetIQ Administration service.

Cause

DRA 8.1 does not currently allow the ADAM Admin group to be changed in the GUI once set.

Additional Information

Formerly known as NETIQKB70529