Without granting any additional permissions within Active Directory or Active Roles beyond view permissions, it is possible to perform many tasks by leveraging an Automation Workflow which requires parameters and then performs operations on them.
"Approval" activities are not possible within an Automation Workflow, but it is possible to send a notification.
For example: a Workflow can be run which requires the initiator to search for a User account and then enter a password. The Workflow can then run an "Update" activity to set the value of the edsaPassword attribute to the specified value and send a notification to a DL with the initiator's name.
© 2024 One Identity LLC. ALL RIGHTS RESERVED. Feedback Terms of Use Privacy Cookie Preference Center