立即与支持人员聊天
与支持团队交流

Active Roles 7.5 - User Guide

Introduction Getting Started One Identity Starling Two-factor Authentication for Active Roles User or Service Account Management Group Management Computer Account Management Organizational Unit Management Management of Contacts Management of Exchange Recipients

Steps for finding groups in which a user is a member

To find groups in which a user is a member

  1. In the console tree, locate and select the folder that contains the user account.
  2. In the details pane, right-click the user account, and then click Properties.
  3. Click the Member Of tab.

NOTE:

  • The Member Of tab for a user displays a list of groups in the domain where the user’s account is located. Active Roles does not display groups that reside in trusted domains.
  • On the Member Of tab, you can select the Show nested groups check box in order for the list to also include the groups to which the user belongs because of group nesting.

Copying a group

To create a copy of a group, right-click the group, click Copy, and follow the instructions in the wizard. The first step of the wizard looks as shown in the following figure.

Figure 11: Copying a group

The copy contains the same permission settings as the original group. The Copy Object ‑ Group wizard allows you to modify the membership list of the new group.

Steps for copying a group

To copy a group

  1. In the console tree, locate and select the folder that contains the group that you want to copy.
  2. In the details pane, right-click the group you want to copy, and then click Copy to start the Copy Object - Group wizard.
  3. Follow the wizard pages to specify properties of the new group, such as the group name, pre-Windows 2000 name, description, membership list, and Exchange address settings.
  4. If you want to set values for additional properties (those for which the wizard pages do not provide data entries), click Edit Attributes on the completion page of the wizard.
  5. After setting any additional properties for the copy of the group, click Finish on the completion page of the wizard.

NOTE:

  • The behavior of the wizard pages may vary depending on the configuration of Active Roles policies. To determine whether a given item on a page is under the control of a certain policy, observe the text label next to the item: the underlined text label indicates that some policy restrictions are in effect. Click underlined text labels to examine the policies that govern the behavior of the wizard pages.
  • By default, some commonly-used properties are carried over to the newly copied group from the original group. Thus, the group membership list is copied from the original group, and can be modified in the Copy Object - Group wizard.
  • The group scope and group type are also copied from the original group, but these properties cannot be modified in the Copy Object - Group wizard. You can change these properties after the copy of the group is created. For instructions, see Steps for converting a group to another group type and Steps for changing group scope later in this document.
  • You can use the Find function of Active Roles in order to locate the group that you want to copy. Once you have found the group, you can start the Copy Object - Group wizard from the Find dialog box: Right-click the group in the list of search results and click Copy.

Modifying group properties

To modify group properties, right-click the group and click Properties. You can make changes to group properties using the Properties dialog box, shown in the following figure.

Figure 12: Modifying group properties

In the Properties dialog box, some property labels may be displayed as hyperlinks. The hyperlink indicates that Active Roles enforces certain policy restrictions on the property. To examine policy details, click the hyperlink: the policy information is displayed (see Getting policy-related information earlier in this document).

The policy information is also displayed whenever you supply a property value that violates a policy restriction. Property changes cannot be applied until you enter an acceptable value.

You can use the Properties dialog box to view or modify any property of the group: go to the Object tab and click Advanced Properties. In the Advanced Properties window you can manage all properties, including those that cannot be accessed via the Properties dialog box itself.

You can also display the Advanced Properties window as follows: right-click the group and select All Tasks | Advanced Properties.

 NOTE: In the console, you can select multiple groups, right-click the selection, click Properties, and then modify properties of all the selected groups collectively via the Properties dialog box.
相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级