Voltar
-
Título
Assigning a custom View Access Template to a Managed Unit does not grant the ability to view the objects -
Descrição
When attempting to assign a custom Access Template to a Group or User in Active Roles which should grant View and list permissions, the User is not granted the expected access. -
Resolução
A Managed Unit is simply a view into Active Directory, and still must respect Active Directory permission requirements. It is still necessary to work backwards up the Active Directory tree in order to see any objects. The View Access Template needs to include the List, and Read permissions necessary to view the Domain, Organizational Units, and Containers at the root of Active Directory including all objects in the Managed Unit.
If the Managed Unit is retrieving Users, nesting the Users - Read All Properties Access Template located in Configuration | Access Template | Active Directory should resolve the issue.