Chatee ahora con Soporte
Chat con el soporte

Active Roles 7.6 - User Guide

Introduction Getting Started One Identity Starling Two-factor Authentication for Active Roles User or Service Account Management Group Management Computer Account Management Organizational Unit Management Management of Contacts Management of Exchange Recipients

Rescheduling temporal group memberships

The temporal membership settings on a group member include the start time and end time settings.

The start time setting specifies when the object is to be actually added to the group. This can be specific date and time or an indication that the object should be added to the group right away.

The end time setting specifies when the object is to be removed from the group. This can be specific date and time or an indication that the object should not be removed from the group.

You can view or modify both the start time and end time settings using the Active Roles console.

To view or modify the start or end time setting for a member of a group

  1. In the Active Roles console, right-click the group and click Properties.
  2. In the list on the Members tab in the Properties dialog box, click the member and then click the Temporal Membership Settings button.
  3. Use the Temporal Membership Settings dialog box to view or modify the start or end time settings.

The Temporal Membership Settings dialog box provides the following options:

  • Add to the group | Now  Indicates that the object should be added to the group at once.
  • Add to the group | On this date  Indicates the date and time when the object should be added to the group.
  • Remove from the group | Never  Indicates that the object should not be removed from the group.
  • Remove from the group | On this date  Indicates the date and time when the object should be removed from the group.

Regular members have the Add to group and Remove from group options set to Already added and Never, respectively. You can set a particular date for any of these options in order to convert a regular member to a temporal member.

NOTE:

  • You can view or modify the start time and end time settings by managing an object rather than groups in which the object has memberships. Open the Properties dialog box for that object, and then, on the Member Of tab, select the group for which you want to manage the object’s start or end time setting and click Temporal Membership Settings.
  • On the Members or Member Of tab, you can change the start or end time setting for multiple members or groups at a time. From the list on the tab, select two or more items and click Temporal Membership Settings. Then, in the Temporal Membership Settings dialog box, select check boxes to indicate the settings to change and make the changes you want.

Removing temporal members

You can remove temporal group members in the same way as regular group members. Removing a temporal member of a group deletes the temporal membership settings for that object with respect to that group. As a result, the object will not be added to the group. If the object already belongs to the group at the time of removal, then it is removed from the group.

To remove a temporal member of a group

  1. In the Active Roles console, right-click the group, and then click Properties.
  2. On the Members tab in the Properties dialog box, click the member, click Remove, and then click Apply.

NOTE: You can remove an object that is a temporal member of a group by managing the object rather than the group. Open the Properties dialog box for that object, and then, on the Member Of tab, select the group from the list and click Remove.

 

Computer Account Management

About computer accounts

Computer accounts are Active Directory objects used to represent physical computers. Computer accounts allow computers to join the domain, and control their access to resources on the network. The operating system uses computer account information to determine access permissions for a computer.

Active Roles provides the facility to perform administrative tasks such as create, modify, and delete computer accounts. Active Roles can also be used to disable and enable accounts, add and remove accounts from groups, and reset accounts.

The following section describes how to use the Active Roles console to manage computer accounts. You can also use the Active Roles Web Interface to perform management tasks on computer accounts.

Documentos relacionados

The document was helpful.

Seleccionar calificación

I easily found the information I needed.

Seleccionar calificación