Active Roles (formerly known as ActiveRoles®) is an administrative platform that facilitates administration and provisioning for Active Directory and Exchange. Active Roles enables the organization to develop a flexible administrative structure that suits their needs, while ensuring secure delegation of tasks, reduced workloads, and lower costs.
Active Roles increases the productivity of system administrators and help-desk operators by automating provisioning tasks on directory objects in compliance with corporate administrative policies in corporate Active Directory and Exchange environments. The policy enforcement featured in the product guarantees that every administrative action taken is consistent with corporate security standards, which is a top priority for most organizations.
The Active Roles User Guide is designed for individuals responsible for performing administrative tasks using the Active Roles console (MMC Interface). This document provides information about the Active Roles console user interface, and includes instructions to help delegated administrators and help-desk operators perform day-to-day administrative activities.
The Active Roles User Guide is supplemented with the Active Roles Administration Guide that provides conceptual information about the product, and includes systematic instructions on how to deploy the Active Roles administrative structure.
Starting the Active Roles console
The Active Roles console, also referred to as MMC Interface, is a comprehensive administrative tool for managing Active Directory and Microsoft Exchange. With the Active Roles console, you can easily find directory objects and perform administrative tasks.
To start the Active Roles console
- Depending upon the version of your Windows operating system, click Active Roles 7.4.4 Console on the Apps page or select All Programs | One Identity Active Roles 7.4.4 | Active Roles 7.4.4 Console from the Start menu.
NOTE: Normally, the Active Roles console automatically chooses the Administration Service and establishes a connection. If the console cannot connect to the Administration Service or you want to manually select the Administration Service, see “Connecting to the Administration Service” in the Active Roles Administration Guide.
On installing Active Roles on a computer, the MMC interface user access setting is not enabled by default, and any user is enabled to log in to the MMC interface. You can use Configuration Center, to set the Active Roles MMC interface user access.
To manage the MMC interface access
On the Dashboard page in the Configuration Settings main window, in the MMC Interface Access area, click Manage Settings .
- On the MMC Interface Access page that opens, in the Settings area, click on the Component item, and then click Modify or double-click on the Component item.
- On the MMC Interface Access wizard that is displayed, select one of the following options:
- Allow Console (MMC Interface) access for all users: Enables user to log in to MMC interface.
- Restrict Console (MMC Interface) access for all users: Selecting this option restricts all non Active Roles Administrators from using the console. All delegated users are affected, however, it does not apply to Active Roles Administrators.
- Click OK.
The MMC Interface Access settings get configured successfully. A message is displayed prompting you to restart the Administrative Service to disconnect the current MMC interface user sessions and for the updated settings to be reflected on the MMC interface.
- The user must be delegated with the User Interfaces access rights on the User Interfaces container under Server Configuration to obtain access to the MMC interface. User Interfaces Access templates that provide the access rights are available as part of the Active Roles built-in Access templates in the User Interfaces container.
- For information on delegating Console access to specified users, see Delegating control to users for accessing MMC interface