Hello,
we plan to use ADAXES on 6 locations.
Each location is supported by a local support group which should only be able to manage the local AD object defined in different OUs.
For testing I created 2 groups:
Berlin User Management
London User Management
with the same Action
Enable Account
But I defined different selections
Berlin: OU=Berlin Office,OU=Offices,DC=demo,DC=com
London: OU=London Office,OU=Offices,DC=demo,DC=com
Now my question: How can I grant different permissions for the groups or the tasks.
Currently the support team from Berlin is able to enable accounts in the London OU and vice versa.
Many thanks.