Group Managed By

Question

I've just been handed management of Adaxes and I'm looking for a bit of help.
My first task is to allow our Admin staff using the Web Interface to Add a "Managed By" User to a Global Security group or Distribution List using a Group manager Web Interface.
I also need to add a "Secondary Manager" which I know is [ms-Exch-Co-Managed-By-Link], but I'd like this to appear in the Web Interface as a List with "Secondary Managers" appearing at the top as the title of the List.
I also wondered whether it is possible for secondary managers to update the membership list and whether this requires an attribute to show within the Interface.

Any help would be much appreciated.
Thanks

Answer 1

Hello Alan,

My first task is to allow our Admin staff using the Web Interface to Add a "Managed By" User to a Global Security group or Distribution List using a Group manager Web Interface.

To achieve what you need, have a look at the following tutorial: http://www.adaxes.com/tutorials_WebInte ... diting.htm. Following the steps in the tutorial you can add Managed By and ms-Exch-Co-Managed-By-Link properties to View and Modify group forms.

I also need to add a "Secondary Manager" which I know is [ms-Exch-Co-Managed-By-Link], but I'd like this to appear in the Web Interface as a List with "Secondary Managers" appearing at the top as the title of the List.

Have a look at the following help article: http://www.adaxes.com/help/?HowDoI.Mana ... Names.html.

I also wondered whether it is possible for secondary managers to update the membership list and whether this requires an attribute to show within the Interface.

Yes, it is possible. To grant rights to add/remove members from groups to Secondary Managers, you will need to create a Security Role and a Business Unit. The Business Unit will contain groups that have the currently logged on user specified in the ms-Exch-Co-Managed-By-Link property. The unit will be used in the Activity Scope of the Security Role. To create the Business Unit:

1. Launch Adaxes Administration Console.
2. Right-click your Adaxes service node, navigate to New and click Business Unit.
   
3. On step 2 of the Create Business Unit wizard, click Add.
4. Select Query Results and enter the following into the Filter field: (&(objectCategory=group)(msExchCoManagedByLink=%distinguishedName%)).
   
5. Click OK twice and finish creating the Business Unit.

To create a Security Role that grants users permissions for Secondary managers to modify group membership:

1. Launch Adaxes Administration Console.
2. Right-click your Adaxes service node, navigate to New and click Security Role.
   
3. On step 2 of the Create Security Role wizard, click Add.
4. Select Only selected object types and then select Group Object type.
5. Check the Write 'Member' Property permission in the Allow column and click OK.
   
6. Click Next and double-click Authenticated users.
   
7. Select Business Units in the Look in drop-down menu.
8. Double-click the Business Unit you have created.
   
9. Click OK twice and finish creating the Security Role.You should have something like the following:
   

Comments

Thanks very much. I'll follow the instructions and let you know how I get on.

---

Thank you.
It does exactly what I required.