The Active Roles Web Interface Configuration Guide describes how to deploy and customize the Active Roles Web Interface for your organization. This document:
Provides a brief overview of the Web Interface.
Describes the available customization capabilities.
Provides instructions on how to customize the Web Interface and perform administrative tasks.
You can deploy the Active Roles Web Interface on any computer that meets the product system requirements and is running Internet Information Services (IIS) 7.5 or later.
NOTE: You do not need to deploy the Web Interface component on the same computer that runs the Active Roles Administration Service. However, the computer (or computers) hosting the Web Interface must have a reliable network connection to the computer (or computers) running the Administration Service component.
For the prerequisites of deploying the Web Interface, see
The Web Interface setup configures the Web Server (IIS) server role to meet the Web Interface requirements. You can use Server Manager to verify that the server role is configured properly.
Web Interface requires Internet Information Services to provide Read/Write delegation for the following features:
Handler Mappings
Modules
To confirm that these features have delegation set to Read/Write, in the Internet Information Services (IIS) Manager tool, use Feature Delegation.
The Active RolesWeb Interface is a customizable web application for data administration and provisioning in Active Directory. With the Web Interface, an intranet user (such as a helpdesk agent or a delegated administrator) can connect to Active Roles using a web browser and perform day-to-day administrative tasks, including user management tasks, such as modifying personal data, or adding users to groups.
Web Interface users can perform administrative tasks and view or modify directory data. However, their scope of authority is limited by the rights delegated in Active Roles. A Web Interface user sees only the commands, directory objects, and object properties to which they have administrative access.
Administrators can customize the pages of the Web Interface, and administrators with the proper privileges can also add or remove commands or fields displaying property values.
For more information on the Web Interface, see About the Web Interface in the Active Roles Feature Guide.
To open the Active RolesWeb Interface, you must know:
The name of the web server running the Web Interface component.
The name of the Web Interface site you want to access.
When configuring the Web Interface, the Administration Service creates the following Web Interface sites by default:
ARWebAdmin: The Administration Site, supporting a broad range of administrative tasks.
ARWebHelpDesk: The Helpdesk Site, supporting the most common administrative tasks, typically performed by helpdesk personnel in an organization.
ARWebSelfService: The Self-Service Site, allowing users to manage their own personal accounts.
You can configure multiple instances of the Web Interface, referred to as Web Interface sites. By default, Active Roles ships with the following configuration templates.
Default Site for Administrators: The Administrator Site, supporting a broad range of tasks, including the management of directory objects and computer resources.
Default Site for Help Desk: The Helpdesk Site, supporting tasks that are typically performed by helpdesk operators, such as enabling or disabling accounts, resetting passwords, and modifying certain user or group properties.
Default Site for Self-Administration: The Self-Service Site, providing the User Profile Editor, allowing end users to manage personal or emergency data through an easy-to-use editor.
Each configuration template provides a specific set of commands installed by default. However, you can customize each Web Interface site adding or removing commands, and by modifying the web pages (forms) associated with each command. For more information on customizing the Web Interface sites, see Customizing the Web Interface.
Although the Web Interface dynamically adapts to roles assigned to users, you can ensure additional flexibility by configuring separate Web Interface sites to the various individual roles (such as directory administrators or helpdesk personnel). The static configuration of interface elements ensures that Web Interface users have access to all the specific commands and pages needed to perform their duties.
© 2024 One Identity LLC. ALL RIGHTS RESERVED. Conditions d’utilisation Confidentialité Cookie Preference Center
