Challenge
Prime Healthcare's Active Directory infrastructure is highly complex. We manage over 50,000 employees, a large number of Contractors, Vendors, External entities and over 30,000 computer objects in 48 sites across United States. With an overly complex OU structure, we find it hard to consistently stay on top of what is being delegated in our environment while maintaining the best security posture, as we are all prone to error. Prime's IT Personnel spans across the United States and Offshore providing assistance to our hospitals and Datacenters in the United States. Our biggest challenge was using native AD Tools that have limited functionality out-of-the-box. We could not provide proper Role Based Access Control, limit or restrict access to certain attributes of User objects or OUs. We needed to ensure everyone followed the same Account provisioning standards across the Enterprise while following the appropriate security guidelines. As the environment grows, automation is now a business requirement to ensure multiple pieces of the puzzle are all met with the same end. Either it's provisioning an account, modifying its attributes, security group management, or managing Microsoft Office365 access from a single-pane-of-glass. We also have a high volume of calls to HelpDesk regarding Account Lockouts, Password changes, due to the lack of any Self-service option.
Solution
ADAxes helped us tackle our biggest problem, role-based access control. We now have an organized structure with uniform permissions across our Enterprise. With complete visibility over our users, groups, computers, administrators, and automation, we can easily rest knowing that minimal room for human error exists. ADAxes allowed us to create custom scripts with Powershell. ADAxes allowed us to create a better AD security posture while completely customizing the products to fit our needs, for example, by combining two separate products into one (Self-Service & AD Management Tool). ADAxes allows us to create custom self-service and administrative portals based on our needs. With comprehensive customizations, it certainly outshines other products on the market.
Benefits
ADAxes has become a key player in Prime Healthcare's IT department. The application immediately improved all areas of administration and Helpdesk support. Our Active Directory's infrastructure is cleaner with the help of the ADAxes software. ADAxes simplified a lot of mundane tasks and allowed administrators to focus on more important goals. With the endless amount of customizations, as an example we are implemeting a custom action to provision and deprovision licensing. There isn't a problem we cannot solve with its help! ADAxes perpetual licensing model is what caught our eye. In a world where subscription based modeling is a common thing.
Yousef Jarrar
IAM Engineer