In the list of group members displayed by the Web Interface, you can distinguish between regular and temporal group members. It is also possible to hide or display so-called pending members, the temporal members that are scheduled to be added to the group in the future but are not actual members of the group so far.
To view temporal members of a group
-
In the Web Interface, select the group, and then choose the Members command.
-
Review the list on the Members page:
-
An icon of a small clock overlays the icon for the temporal members.
-
If the Show pending members check box is selected, the list also includes the temporal members that are not yet added to the group.
The list of group memberships for a particular object makes it possible to distinguish between the groups in which the object is a regular member and the groups in which the object is a temporal member. It is also possible to hide or display so-called pending group memberships, the groups to which the object is scheduled to be added in the future.
To view groups in which an object is a temporal member
-
In the Web Interface, select the object, then choose the Member Of command.
-
Review the list on the Member Of page:
-
An icon of a small clock overlays the icon for the groups in which the object is a temporal member.
-
If the Show pending group memberships check box is selected, the list also includes the groups to which the object is scheduled to be added in the future.
The temporal membership settings on a group member include the start time and end time settings.
The start time setting specifies when the object is to be actually added to the group. This can be specific date and time or an indication that the object should be added to the group right away.
The end time setting specifies when the object is to be removed from the group. This can be specific date and time or an indication that the object should not be removed from the group.
You can view or modify both the start time and end time settings using the Web Interface.
To view or modify the start or end time setting for a member of a group
-
In the Web Interface, select the group, then choose the Members command.
-
In the list on the Members page, select the member, then click the Temporary Access button.
-
To view or modify the start or end time settings, use the Temporal Membership Settings dialog.
The Temporal Membership Settings dialog box provides the following options:
-
Add to the group > Now: Adds the object to the group immediately.
-
Add to the group > On this date: Adds the object to the group on the specified date and time.
-
Remove from the group > Never: Specifies that the object will not be removed from the group automatically.
-
Remove from the group > On this date: Removes the object from the group on the specified date and time.
Regular members have the Add to group and Remove from group options set to Already added and Never, respectively. To convert a regular member to a temporal member, set a specific date with these options for the member.
NOTE: Consider the following when configuring temporal group memberships:
-
You can view or modify the start time and end time settings by managing an object rather than the groups in which that object has memberships. To do so, select the object, then choose the Member Of command. On the Member Of page, select the group for which you want to manage the object’s start or end time setting and click Temporary Access.
-
On the Members or Member Of page, you can change the start or end time setting for multiple members or groups at a time. On the page, select multiple list items, click Temporary Access, then, in the Temporal Membership Settings dialog, make the changes you want.
You can remove temporal group members in the same way as regular group members. Removing a temporal member of a group deletes the temporal membership settings for that object with respect to that group. As a result, the object will not be added to the group. If the object already belongs to the group at the time of removal, then it is removed from the group.
To remove a temporal member of a group
-
In the Web Interface, select the group, then click Members.
-
On the Members page, select the member, and click Remove.
NOTE: You can remove an object that is a temporal member of a group by managing the object rather than the group. Select the object, then choose the Member Of command. On the Member Of page, select the group from the list and click Remove.
You can use the Web Interface to manage directory data in Microsoft Active Directory Lightweight Directory Services (AD LDS). Similarly to Active Directory domains, directory data can be managed in only the AD LDS instances that are registered with Active Roles (that is, in managed AD LDS instances).
The application directory partitions found on the managed AD LDS instances are grouped together in the AD LDS (ADAM) container, thus making it easy to locate the AD LDS data. Each directory partition is represented by a separate container (node) so you can browse the partition tree the same way you do for an Active Directory domain.
The Web Interface supports a wide range of administration operations on AD LDS users, groups and other objects, so you can create, view, modify, and delete directory objects, such as users, groups, containers and Organizational Units in AD LDS the same way you do when managing data in Active Directory.
To browse the directory tree in AD LDS directory partitions
-
On the Navigation bar, click Directory Management.
-
In the Browse pane, click the Tree tab.
-
On the Tree tab, do the following:
-
Expand the AD LDS (ADAM) container.
-
Under AD LDS (ADAM), expand a directory partition object to view its top-level containers.
-
Expand a top-level container to view the next level of objects in that container.
-
Do one of the following:
-
To move down a directory tree branch, continue expanding the next lowest container level on the Tree tab.
-
To administer a directory object at the current directory level, click a container on the Tree tab and perform the following instructions.
To manage directory data in AD LDS
On the Tree tab in the Browse pane, under AD LDS (ADAM), click the container that holds the data you want to manage.
-
In the list of objects, select the object that represents the directory data you want to manage.
-
Use commands in the Command pane to perform management tasks.
NOTE: In the list of objects, clicking the name of a leaf object, such as a user or group will display the properties page of the object. Clicking a container object, such as a partition or an organizational unit, will display a list of objects held in that container.
