By default, on installing Active Roles, all users are allowed to log in to the Active Roles Console. To manage the Console access for a user, you must configure the options using Configuration Center > MMC Interface Access > Manage settings. Selecting this option restricts all non-Active Roles Administrators from using the Console. All delegated users are affected, however, it does not apply to Active Roles Administrators.
To be able to log in to the Active Roles Console, the user must be delegated with the User Interfaces access rights on the User Interfaces container under Server Configuration. User Interfaces Access Templates that provide the access rights are available as part of the Active Roles built-in Access Templates in the User Interfaces container.
To delegate the control to users in the User Interfaces container you must apply the User Interface Access Template
-
In the Console tree, expand Active Roles > Configuration > Server Configuration.
-
Under Server Configuration, locate the User Interfaces container, right-click it, and click Delegate Control.
-
On the Users or Groups page, click Add, and then select the users or groups to which you want to delegate the control. Click Next.
-
On the Access Templates page, expand the Active Directory > User Interfaces folder, and select the check box next to User Interface Management-MMC Full control.
-
Click Next and follow the instructions in the wizard, accepting the default settings.
-
After you complete these steps, the users and groups you selected in Step 3 are authorized to log in to the Active Roles Console.
-
Click OK to close the Active Roles Security dialog.