HOW TO: Configure access to use the 'My Managed Resources' feature in the Self Service site (4249736)

Active Roles 7.5 introduces the My Managed Resources module in the Active Roles Web interface Self Service site. This feature allows for self service group management of owned resources, using the Self Service site.

Using this feature requires that specific Access Templates be delegated in addition to specifying an object as a group's owner in Active Roles. Refer to the steps below for guidance on how to properly configure the required Access Templates.

Apply the Self - Group Management Access Template to the OU containing the groups to be self managed

• This Access Template can be located in the Console under: Configuration | Access Templates | User Self-management
• Assign Primary Owner and/or Secondary Owners as the trustee
• This Access Template provides the necessary configuration to authorize users to manage the groups they are responsible for

Apply the Users - Read All Properties Access Template to all OUs containing the group members of the groups to be self managed

• This Access Template can be located in the Console under: Configuration | Access Templates | Active Directory
• Assign Authenticated Users as the trustee
• This Access Template provides users with rights to view group memberships of the groups they are responsible for

If delegating Users - Read All Properties is problematic and lesser permissions are desired, the absolute minimum permissions below may be substituted via the creation of a custom Access Template, which can be applied to specific user or group objects in lieu of using Authenticated Users:

• User Class - Read - managedObjects
• User Class - Read - Public Information
• User Class - Allow - List