Chat now with support
Chat with Support

Active Roles 7.5.3 - User Guide

Introduction Getting Started One Identity Starling Two-factor Authentication for Active Roles User or Service Account Management Group Management Computer Account Management Organizational Unit Management Management of Contacts Management of Exchange Recipients

Steps for finding a user account

To find a user account

  1. On the Action menu, click Find to display the Find window.
  2. In the Find box, click Users.
  3. In the In box, select the domain, container or Managed Unit you want to search, or click Browse to locate a domain, container or Managed Unit.
  4. Type in a name, a description, or both:
    • In the Name box, type the name (or a part of the name) of the user you want to find.
    • In the Description box, type the description (or a part of the description) of the user you want to find.
  5. Click Find Now to start your search.

NOTE:

  • You can manage found user accounts directly from the list in the Find window: right-click a list item, and then use commands on the shortcut menu to perform management tasks.
  • For more information on how to search for user accounts, see Steps for searching for a user, contact, or group earlier in this document.
  • You can use the Advanced tab for more powerful search options. For details, see Steps for using advanced search options earlier in this document.

Copying a user account

To create a copy of a user account, right-click the account, click Copy, and then follow the instructions in the wizard. The first step of the wizard looks as shown in the following figure.

Figure 5: Copying a user account

The copy of a user account belongs to the same Windows groups as that (original) user account.

Steps for copying a user account

To copy a user account

  1. In the console tree, locate and select the folder that contains the user account that you want to copy.
  2. In the details pane, right-click the user account you want to copy, and then click Copy to start the Copy Object - User wizard.
  3. Follow the wizard pages to specify properties for the copy of the user account, such as the user first name, last name, full name, display name, logon name, pre-Windows 2000 logon name, password, and Exchange mailbox settings.
  4. If you want to set values for additional properties (those for which the wizard pages do not provide data entries), click Edit Attributes on the completion page of the wizard.
  5. After setting any additional properties for the copy of the user account, click Finish on the completion page of the wizard.

NOTE:

  • The behavior of the wizard pages may vary depending on the configuration of Active Roles policies. To determine whether a given item on a page is under the control of a certain policy, observe the text label next to the item: the underlined text label indicates that some policy restrictions are in effect. Click underlined text labels to examine the policies that govern the behavior of the wizard pages.
  • By default, some commonly-used properties are carried over to the newly copied user account from the original account. Thus, the group memberships is copied from the original account: if the original account is a member of a given group, the Copy Object - User wizard automatically adds the copy of the account to that group.

Modifying user account properties

To modify user account properties, right-click the account and click Properties. You can make changes to user account properties in the Properties dialog box, shown in the following figure.

Figure 6: User account properties

In the Properties dialog box, some property labels may be displayed as hyperlinks. The hyperlink indicates that Active Roles enforces certain policy restrictions on the property. To examine policy details, click the hyperlink: the policy information is displayed (see Getting policy-related information earlier in this document).

The policy information is also displayed whenever you supply a property value that violates a policy restriction. Property changes cannot be applied until you enter an acceptable value.

You can use the Properties dialog box to view or modify any property of the user account: go to the Object tab and click Advanced Properties. In the Advanced Properties window you can manage all properties, including those that cannot be accessed via the Properties dialog box itself.

You can also display the Advanced Properties window as follows: right-click the user account and select All Tasks | Advanced Properties.

 NOTE: In the console, you can select multiple user accounts, right-click the selection, click Properties, and then modify properties of all the selected accounts collectively via the Properties dialog box.
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating