0 votes

Hi

Our new user process is that a HR system creates the AD object and then the 1st line team use a web page to enable the account after filling out any extra information.
I am currently cleaning up the permissions which had originally been applied, but when the 1st line team come to process the account, they can do everything BUT enable the users account.

I've given access to the Lockout-Time and Reset Password, but this isn't a locked out account, it's a disabled account.
What permissions do I need to give so that they can then enable the account?
I've tried searching the properties for enable, disable, allow etc.

Thanks

by (2.0k points)

1 Answer

0 votes
by (294k points)
selected by
Best answer

Hello,

Have a look at the following tutorial: https://www.adaxes.com/tutorials_Delega ... ptions.htm.

0

Thanks.

Related questions

0 votes
1 answer

What specific permission is needed in a security role to grant access to enable a user account?

asked Dec 7, 2023 by mightycabal (1.0k points)
0 votes
1 answer

I only want to allow a security role to write 'user must change password at next logon' and not all options they have under 'Account Options'. The only permission I can see in ... ". I'd rather not assign permissions to all these settings if I don't have to.

asked Apr 6, 2021 by cfrazier (20 points)
0 votes
0 answers

Hello, I'm curious again... In this post: Lync Fails when Line URI is used its mentioned that because Adaxes uses PowerShell v2, and the Lync module from Microsoft ... scripts. How then, does Adaxes go about enabling and disabling users for Lync? Thanks.

asked Jan 27, 2016 by EgotisticalGiraffe (350 points)
0 votes
1 answer

Using the built in 'Deprovision' Custom Command, I would like the person that is trying to Deprovision a user (Help Desk member) be asked who (from a list of existing active ... to leave the question 'blank', which means that no one gets access to the mailbox.

asked Apr 22, 2020 by RayBilyk (240 points)
0 votes
1 answer

We are using the SeeAlso attribute to store who is responsible for specific accounts. We do not wish to use the Manager field, because the Manager/Direct Report structure is ... to, for example, extende the expiration date of an account. Is that possible?

asked Jan 28, 2020 by manuel.galli (100 points)
3,588 questions
3,277 answers
8,303 comments
548,085 users