Access is denied.

Question

When trying to modify any user settings from reset password to disable or enable I'm getting the error access is denied.
This is only from the helpdesk or admin url's, from the Self service url i'm able to change or modify information and change passwords just fine.

Looking at the adaxes logs i find the following error "Access Control Processor: Access is denied. "

what am i missing

Answer 1

Hello David,

In Adaxes permissions are granted by Security Roles and native Active Directory permissions are ignored. By default, there are two Security Roles effective for all users:

• Domain User role – grants all users with permissions only to view all properties of all objects,
  
• User Self-Service role - grants all users with permissions only over their own accounts (e.g. change passwords).
  

For information on how to grant users permissions to modify properties of AD objects, have a look at the following tutorial: http://www.adaxes.com/tutorials_Delegat ... erties.htm.

For information on how to grant users permissions to reset passwords of other users, have a look at the following tutorial: http://www.adaxes.com/tutorials_Delegat ... swords.htm.