立即与支持人员聊天

获得即时帮助
完成注册

登录

请求定价

联系销售人员

Active Roles 8.1.5 - Feature Guide

Introduction About Active Roles

Main Active Roles features Technical overview of Active Roles

Presentation components

Active Roles Console (MMC Interface)

Console tree Details pane Advanced pane View mode

Controlled objects

Trustees, permissions, roles and Managed Units Finding directory objects

Active Roles Web Interface

Web Interface parts

Web Interface Navigation bar Web Interface Browse pane Web Interface Object list Web Interface Toolbar Web Interface Command pane Web Interface Summary pane

Web Interface Personal views

Using Personal views Creating a Personal view

Locating directory objects in the Web Interface

Searching for directory objects in the Web Interface Filtering the contents of a container in the Web Interface

Active Roles Management Shell Custom interfaces Active Roles ADSI Provider Active Roles Reporting

Service components

Data processing component Configuration database Audit trail

Network data sources Security and administration elements

Access Templates for role-based administration Policy Objects to enforce corporate rules Managed Units to provide administrative views

Active Directory security management

Management of native security

Customization using ADSI Provider and script policies

Custom applications and user interfaces Custom script policies

Dynamic groups Workflows

Workflow features and activities

Workflows – Saving object properties Workflows – Modifying requested changes Workflows – Initialization scripts Workflows – Searching for expiring users Workflows – Sending plain-text notification messages

Operation in multi-forest environments

Examples of use

Distributing administration Integrating with other systems Managing multi-forest Active Directory design Simplifying Active Directory structure Handling organizational changes User account management

Administrative rules and roles

How Managed Units work Deployment considerations for Managed Units

Managed Unit membership rules Delegation of Managed Units

Access Templates

How Access Templates work Applying permissions with Access Template

Add Permission Entries wizard

Full Control access Object access Object property access Creating or deleting child object permissions

Access Template link management Synchronizing Access Template permissions to Active Directory

Managing Active Directory permission entries

Adding, modifying, or removing permissions to Access Templates Nesting Access Templates Examples of using Access Templates

Scenario 1: Implementing a helpdesk

Preparing a helpdesk Access Template Creating a helpdesk group Applying the Help Desk Access Template

Scenario 2: Implementing Self-Administration

Preparing a self-administration Access Template Applying the self-administration Access Template

Deployment considerations for Access Templates

Delegating Organizational Unit administration duties Delegation of group administration Delegation in a functional vs. hosted environment

Delegation in a functional environment Delegation in a hosted environment

Understanding Access Rules Conditional Access Template links Management of Windows claims Claim Type management overview

Source attribute setting Claim type identifier setting Display name setting Description setting User or computer claim issuance setting Protection from accidental deletion Suggested values setting Populating claim source attributes Conditional expression editor

Active Roles Synchronization Service

Bidirectional synchronization Delta processing Group membership synchronization Windows PowerShell scripting Attribute synchronization rules Rule-based generation of Distinguished Names Synchronization scheduling Extensive data system support

Exchange Resource Forest Management Skype for Business Server User Management

Active Directory topologies supported by Skype for Business Server User Management

Configuring and administering Active Roles

Active Roles Setup wizard Active Roles Configuration Center

Configuration Center components Configuring a local or remote Active Roles instance Running the Configuration Center Supported Configuration Center tasks

Initial configuration tasks

Configuring the Administration Service Configuring the Web Interface Configuring join to Starling

Configuration management tasks

Administration Service management tasks

Viewing the core Administration Service settings Modifying the core Administration Service settings Importing configuration data Importing Management History data Checking the state of the Administration Service Starting, stopping or restarting the Administration Service

Web Interface management tasks

Identifying the Web Interface sites Creating a Web Interface site Modifying a Web Interface site Deleting a Web Interface site Exporting the configuration of a Web Interface site to a file

Delegating user access to the Active Roles Console Configuring Active Roles logging settings Configuring Solution Intelligence

Active Roles Configuration Shell Using the System Checker Active Roles Log Viewer Voluntary threshold for managed object count Installation label Safe mode

Support for AWS Managed Microsoft AD

Supported AWS Managed Microsoft AD deployment configuration Supported Active Roles features with AWS Managed Microsoft AD Active Roles feature limitations when using AWS Managed Microsoft AD

FIPS compliance LSA protection support

Windows PowerShell scripting

Administrative rules and roles > Active Roles Synchronization Service > Windows PowerShell scripting

Synchronization Service supports Windows PowerShell-based scripting for data synchronization. The shell is implemented as a Windows PowerShell module, allowing you to automate synchronization tasks via PowerShell scripts.

For more information and examples, see the following sections of the Active Roles Synchronization Service Administration Guide:

Developing PowerShell scripts for attribute synchronization rules
Using PowerShell script to transform passwords

Attribute synchronization rules

Administrative rules and roles > Active Roles Synchronization Service > Attribute synchronization rules

Synchronization Service allows you to create and configure synchronization rules to generate values for target object attributes. These rules support three synchronization types:

Direct synchronization: Assigns the value of a source object attribute to the target object attribute you specify.
Script-based synchronization: Uses your custom Windows PowerShell script to generate the target object attribute value.
Rule-based synchronization: Uses your custom synchronization rules to generate the target object attribute value you want.

Rule-based generation of Distinguished Names

Administrative rules and roles > Active Roles Synchronization Service > Rule-based generation of Distinguished Names

Synchronization Service provides flexible rules for generating the Distinguished Names (DNs) for the created objects. These DN generation rules allow you to ensure that the created objects are named in full compliance with the naming conventions existing in your organization.

Synchronization scheduling

Administrative rules and roles > Active Roles Synchronization Service > Synchronization scheduling

To meet your organizational policies and save both time and effort, you can schedule and automate the configured data synchronization tasks with Synchronization Service.

相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级

© 2024 One Identity LLC. ALL RIGHTS RESERVED. 使用条款隐私 Cookie Preference Center