Active Roles 7.2 - Web Interface User Guide

Viewing temporal members

In the list of group members displayed by the Web Interface, you can distinguish between regular and temporal group members. It is also possible to hide or display so-called pending members, the temporal members that are scheduled to be added to the group in the future but are not actual members of the group so far.

To view temporal members of a group

1. In the Web Interface, select the group, and then choose the Members command.
2. Review the list on the Members page:
   • An icon of a small clock overlays the icon for the temporal members.
   • If the Show pending members check box is selected, the list also includes the temporal members that are not yet added to the group.

The list of group memberships for a particular object makes it possible to distinguish between the groups in which the object is a regular member and the groups in which the object is a temporal member. It is also possible to hide or display so-called pending group memberships, the groups to which the object is scheduled to be added in the future.

To view groups in which an object is a temporal member

1. In the Web Interface, select the object, and then choose the Member Of command.
2. Review the list on the Member Of page:
   • An icon of a small clock overlays the icon for the groups in which the object is a temporal member.
   • If the Show pending group memberships check box is selected, the list also includes the groups to which the object is scheduled to be added in the future.

Rescheduling temporal group memberships

The temporal membership settings on a group member include the start time and end time settings.

The start time setting specifies when the object is to be actually added to the group. This can be specific date and time or an indication that the object should be added to the group right away.

The end time setting specifies when the object is to be removed from the group. This can be specific date and time or an indication that the object should not be removed from the group.

You can view or modify both the start time and end time settings using the Web Interface.

To view or modify the start or end time setting for a member of a group

1. In the Web Interface, select the group, and then choose the Members command.
2. In the list on the Members page, select the member and then click the Temporary Access button.
3. Use the Temporal Membership Settings dialog box to view or modify the start or end time settings.

The Temporal Membership Settings dialog box provides the following options:

• Add to the group | Now  Indicates that the object should be added to the group at once.
• Add to the group | On this date  Indicates the date and time when the object should be added to the group.
• Remove from the group | Never  Indicates that the object should not be removed from the group.
• Remove from the group | On this date  Indicates the date and time when the object should be removed from the group.

Regular members have the Add to group and Remove from group options set to Already added and Never, respectively. You can set a particular date for any of these options in order to convert a regular member to a temporal member.

Removing temporal members

You can remove temporal group members in the same way as regular group members. Removing a temporal member of a group deletes the temporal membership settings for that object with respect to that group. As a result, the object will not be added to the group. If the object already belongs to the group at the time of removal, then it is removed from the group.

To remove a temporal member of a group

1. In the Web Interface, select the group, and then choose the Members command.
2. On the Members page, select the member, and click Remove.

Managing AD LDS data

You can use the Web Interface to manage directory data in Microsoft Active Directory Lightweight Directory Services (AD LDS). Similarly to Active Directory domains, directory data can be managed in only the AD LDS instances that are registered with Active Roles (managed AD LDS instances).

The application directory partitions found on the managed AD LDS instances are grouped together in the AD LDS (ADAM) container, thus making it easy to locate the AD LDS data. Each directory partition is represented by a separate container (node) so you can browse the partition tree the same way you do for an Active Directory domain.

The Web Interface supports a wide range of administrative operations on AD LDS users, groups and other objects, so you can create, view, modify, and delete directory objects, such as users, groups, containers and organizational units, in AD LDS the same way you do when managing data in Active Directory.

To browse the directory tree in AD LDS directory partitions

1. On the Navigation bar, click Directory Management.
2. In the Browse pane, click the Tee tab.
3. On the Tree tab, do the following:
   1. Expand the AD LDS (ADAM) container.
   2. Under AD LDS (ADAM), expand a directory partition object to view its top-level containers.
   3. Expand a top-level container to view the next level of objects in that container.
4. Do one of the following:
   • To move down a directory tree branch, continue expanding the next lowest container level on the Tree tab.
   • To administer a directory object at the current directory level, click a container on the Tree tab and use the instructions that follow.

To manage directory data in AD LDS

On the Tree tab in the Browse pane, under AD LDS (ADAM), click the container that holds the data you want to manage.

1. In the list of objects, select the object that represents the directory data you want to manage.
2. Use commands in the Command pane to perform management tasks.