Return
-
Title
Change Auditor shows high severity event "The DACL was changed for the group -
Description
Change Auditor may show high severity event "The DACL was changed for the group <object DN>" as Active Roles the source. -
Cause
Product design.
-
Resolution
There is a built-in scheduled task called Sync of Permissions to Active Directory. This task is used to propagate permissions defined in an Access Template to create or update permissions entry in Active Directory on the DACL directly so that any user that accesses the object outside of Active Roles can be granted or restricted access to those objects.