How to delegate rights to view Change History (4249932)

Access to view Change History can be provided through the utilization of Access Templates.

The following Access Templates are required, and can be delegated by using the Active Roles Console:

1. Active Roles Console | Configuration | Access Templates | Active Directory | Advanced | Users - View Change History (Extended Right)
   • This Access Template should be delegated to the OUs containing the objects in which the trustee needs to view Change History.
2. Active Roles Console | Configuration | Access Templates | Active Directory | All Objects - Read All Properties
   • This Access Template should be delegated to the entire directory tree to allow the trustee to view OUs, Containers, and Objects.

Once delegated, the trustee should now have the ability to connect to Active Roles via the Active Roles Console or Web Interface, and view the Active Directory tree and Change History for all objects in Active Roles.