Active Roles 7.2 - Access Templates Available out of the Box

Perform any management task on any object in Active Directory Lightweight Directory Services.

List all directory objects and view all properties of any object in Active Directory Lightweight Directory Services.

Create new AD LDS user accounts; perform all management tasks on existing AD LDS user accounts.

List AD LDS user accounts; view and modify all properties of AD LDS user accounts.

List AD LDS user accounts; view all properties of AD LDS user accounts.

List AD LDS groups; view and modify membership lists of AD LDS groups.

Create new AD LDS groups; perform all management tasks on existing AD LDS groups.

List AD LDS groups; view and modify all properties of AD LDS groups.

List AD LDS groups; view all properties of AD LDS groups.

Create new AD LDS container objects; perform all administrative operations on existing AD LDS container objects.

List AD LDS container objects; view and modify all properties of AD LDS container objects.

List AD LDS container objects; view all properties of AD LDS container objects.

Create new AD LDS organizational units; perform all management tasks on existing AD LDS organizational units.

List AD LDS organizational units; view and modify all properties of AD LDS organizational units.

Perform all management tasks on any computer resource; list and select computers.

Create, modify, and delete local user accounts and groups on a computer; list and select computers.

Create, modify, and delete network shares on a computer; list and select computers.

View and modify properties of logical printers installed on a computer; list and select computers.

View properties of all computer resources; list and select computers.

Start/stop services, pause/resume/cancel printing, and create, modify and delete network shares on a computer; list and select computers; list local users and groups, view all properties of local user accounts and groups on a computer.

Add or remove members from groups on a computer; no other permissions are included.

Create groups on a computer; no other permissions are included.

Delete groups on a computer; no other permissions are included.

List groups stored locally on a computer; no other permissions are included.

View and modify descriptions and membership lists of the groups stored locally on a computer; no other permissions are included.

Rename groups stored locally on a computer; no other permissions are included.

Create user accounts on a computer; no other permissions are included.

Delete user accounts on a computer; no other permissions are included.

List user accounts stored locally on a computer; no other permissions are included.

View a list of groups to which the user account belongs; no other permissions are included.

View and modify user account options such as the password options, 'Account is disabled' and 'Account is locked out'; no other permissions are included.

View and modify full names and descriptions of the user accounts stored locally on a computer; no other permissions are included.

View and modify user profile and home folder settings for the user accounts stored locally on a computer; no other permissions are included.

Rename user accounts stored locally on a computer; no other permissions are included.

Change passwords for the user accounts stored locally on a computer; no other permissions are included.

View and modify information on the Ports and Advanced tabs in the Properties dialog box for logical printers; no other permissions are included.

View and modify Name, Location, and Comment for logical printers; no other permissions are included.

View and modify the Not Shared and Shared As options for logical printers; no other permissions are included.

List services defined on a computer; no other permissions are included.

View and modify Name, Display Name, Description, Path to Executable, and Startup Type for services; no other permissions are included.

View and modify the Log On As options for services; no other permissions are included.

View and modify Startup Type for services; no other permissions are included.

Start, stop, pause, and resume services; no other permissions are included.

Create network shares on a computer; no other permissions are included.

List network shares defined on a computer; no other permissions are included.

View and modify Share Name, Path, Comment, and User Limit for network shares; no other permissions are included.

View and modify share permissions on network shares; no other permissions are included.

Use this Access Template to enable delegated administrators to create, view, modify and delete Access Rule objects. Apply this Access Template to containers that hold Access Rule objects.

Use this Access Template to enable delegated administrators to view and modify all properties of existing Access Rule objects. Apply this Access Template to individual Access Rule objects or containers that hold Access Rule objects.

Use this Access Template to enable delegated administrators to view all properties of existing Access Rule objects. Apply this Access Template to individual Access Rule objects or containers that hold Access Rule objects.

Use this Access Template to give delegated administrators full control of automation workflow definitions, including the ability to view and modify workflow definitions, start automation workflow, and view run history. Apply this Access Template to automation workflow definition objects or containers that hold automation workflow definition objects.

Use this Access Template to enable delegated administrators to view automation workflow definitions and run history. Apply this Access Template to automation workflow definition objects or containers that hold automation workflow definition objects.

Use this Access Template to enable delegated administrators to view automation workflow definitions, start automation workflow, and view run history. Apply this Access Template to automation workflow definition objects or containers that hold automation workflow definition objects.

Register domains with Active Roles; view/modify registration information for managed domains.

Create, modify, and delete Access Templates and Access Template containers; add/remove permissions from Access Templates; list Access Templates and Access Template containers.

View or change any configuration settings of Active Roles, except for the settings specific to Active Roles replication.

Create, modify, and delete Active Roles Policy Objects and Policy Object containers; configure Active Roles policies; list Policy Objects and Policy Object containers.

Create, modify, and delete Active Roles Script Modules and Script Module containers; list Script Modules and Script Module containers.

View any configuration settings of Active Roles, including the settings specific to Active Roles replication.

Use this Access Template to allow read access to statistical reports of the number of objects managed by the product (product usage statistics).

Use this Access Template to allow read access to detailed statistical information about the number of objects managed by the product.