You can use the Active Roles Web Interface to add an existing Azure AD user to a group.
To add an Azure AD user to a group
-
On the Active Roles Web Interface navigation bar, click Directory Management.
-
On the Views tab in the Browse pane, click Active Directory.
The list of Active Directory domains is displayed.
-
Click the specific domain, container or the Organizational Unit, and then the specific user that you want to add to a group.
-
Select the user and in the Command pane click Member Of.
The existing Group information for the user is displayed.
-
To add the user to another group, in the <User> (objects found) wizard, click Add.
-
In the Select Object wizard, search and select the group to which you want to add the user.
-
In details pane, right-click the user, and then click Add to a Group.
The <User> (objects found) wizard displays all the groups to which the account has been added as a member.
If you want to remove an existing Azure AD user from a group, see Removing an Azure AD user from a group.
You can use the Active Roles Web Interface to remove an existing Azure AD user from a group.
To remove an Azure AD user from a group
-
On the Active Roles Web Interface navigation bar, click Directory Management.
-
On the Views tab in the Browse pane, click Active Directory.
The list of Active Directory domains is displayed.
-
Click the specific domain, container or the Organizational Unit, and then the specific user that you want to remove from a group.
-
Select the user and in the Command pane click Member Of.
The existing Group information for the user is displayed.
-
In the <User> (objects found) wizard, select the group from which you want to remove the user and click Remove.
A message prompts you to confirm the action.
-
Click Yes to continue.
The group information is removed from the <User> (objects found) wizard.
If you want to add an existing Azure AD user to a group, see Adding an Azure AD user to a group.
You can use the Active Roles Web Interface to view the change history and user activity of an Azure AD user.
To view the change history and user activity of an Azure AD user
-
On the Active Roles Web Interface navigation bar, click Directory Management.
-
On the Views tab in the Browse pane, click Active Directory.
The list of Active Directory domains is displayed.
-
Click the specific domain, container or the Organizational Unit, and then the specific user.
-
In the Command pane, click Change History or User Activity.
You can use the Active Roles Web Interface to delete a user for logon to Azure.
Prerequisites
Only Global Admins can delete Azure users with any roles assigned to them.
|
|
CAUTION: Hazard of data loss!
Deleting a user is a destructive operation that cannot be undone. A new user with the same name as a deleted user does not automatically get the same permissions and memberships as the deleted account. Because of this, One Identity recommends to disable rather than delete accounts. |
To delete an Azure AD user with the Web Interface
-
On the Active Roles Web Interface navigation bar, click Directory Management.
-
On the Views tab in the Browse pane, click Active Directory.
The list of Active Directory domains is displayed.
-
Click the specific domain, container or the Organizational Unit, and then the specific user that you want to delete.
-
In the Command pane, click Delete.
The account is deleted.
Note: In a hybrid environment, the user must be deleted in the on-premises AD first and then the changes must be synchronized with Azure AD. In case, the user is deleted in Azure AD first, the Active Roles Web Interface still displays the Azure properties link for the deleted user but with no information. Further modification of the Azure properties for the deleted user will not be valid.
