Hi
Our new user process is that a HR system creates the AD object and then the 1st line team use a web page to enable the account after filling out any extra information.
I am currently cleaning up the permissions which had originally been applied, but when the 1st line team come to process the account, they can do everything BUT enable the users account.
I've given access to the Lockout-Time and Reset Password, but this isn't a locked out account, it's a disabled account.
What permissions do I need to give so that they can then enable the account?
I've tried searching the properties for enable, disable, allow etc.
Thanks