0 votes

We are using Adaxes 3.3.8507 to create users, with patterns and rules etc, from the Web page. Only users of our Help Desk can do this and we don't require approval. Everything works fine.

But

We would like to create a variation of this. We would like the departmental managers to be able to go to the web site and create a "new user request" that would come to the IT department and be reviewed before creation.

Can you have 2 different create user commands?

or

It could only be just a request and we would re-enter the data in our own "Create User" command. This might be the simplest. It would be good to use Adaxes to create a number of different forms that would generate requests. The property patterns etc are very useful.

by (280 points)

1 Answer

0 votes
by (18.0k points)

Hello,

Adaxes allows requesting an approval for any operation performed in Active Directory. For details, please see

0

Perhaps I didn't explain myself fully. I am asking can the same command behave differently depending on which web module it is executed in? Helpdesk or Self Service?

I have reviewed the demos, they don't cover this area.

Secondly I am asking can Adaxes be used just to create requests that have no furhter action?

0

Hello,

The following will allow to send all users created from the Create User Home Page Action in the Self Service Web Interface for approval:

  1. On the computer, where the Web Interface is installed, start the Web Interface Customization tool.

  2. In the Interface type drop-down list, select Self Service.

  3. Activate the General tab, uncheck the Do not show the Home Page option, select the Actions pane option, and click Configure Home Page Actions.

  4. Click the Add button located at the bottom of the Home Page Actions dialog.

  5. Select the Create New action and choose the User object type.

  6. On the 4th step of the Add Home Page Action wizard, click Add in the Predefined Fields section.

  7. In the Add Default Property Value dialog box that appears, select Show all properties and choose CustomAttributeText3 in the Property name field.

  8. Type Self-Service in the Default value field, then click OK and Finish.

  9. Create the following Business Rule that will activate before creating a User:

    The text of the script in the Run PowerShell Script action should be as follows:

     $Context.TargetObject.PutEx("ADS_PROPERTY_CLEAR", "adm-CustomAttributeText3", $NULL)

After you complete these steps, a new action called Create User will appear on the Self Service Web Interface.

All users created with the help of this Home Page Action will be assigned Adaxes custom property CustomAttributeText3 with the value of this property equal to Self-Service. As the action was configured for the Self Service Web Interface only, this will not affect the other Web Interface types. The Business Rule will look for this property, and, if it is equal to Self-Service, it will send the Create User operation for approval and clear the property.

Another option is to send an email containing the required properties of the user to the approver and cancel the operation. The approver will have to re-enter the user manually again. To do this, you need to perform all the steps as described above, but the Business Rule will be different:

Here, you can use value references to specify the necessary information about the user in the text of the email. See Value Reference Format. Here's a small example of what such an email can contain:

Dear Administrator,

Please, create the following user account:
User Name: %username%
First Name: %firstname%
Last Name: %lastname%
Department: %department%
Title: %title%
E-mail: %mail%

Regards, %adm-InitiatorFullName%

Related questions

0 votes
1 answer

Hi Are there any plans to allow the creation of approval requests via PowerShell? My client has a requirement to allow staff to request new Teams, but the Team needs to ... could be a balance of both automated approval emails and not as required. Thanks Matt

asked Oct 12, 2023 by chappers77 (2.0k points)
0 votes
1 answer

Hi, I'd like to enable users to be able to request distribution group creation. We have two Containers: Public Distributions Managed Distributions In public, this is the ... custom command must be defined just for this option, that could work too. Thanks!

asked Jul 19, 2012 by Legit (80 points)
0 votes
1 answer

Adaxes seems to want to use the Manager field to specify who gets approval confirmation emails. What do you do about a user without a manager, such as the CEO? Let's assume they're not tech saavy, and the IT department needs to confirm their requests.

asked Feb 10, 2020 by Liam (20 points)
0 votes
1 answer

Hello I try to create a form that lets HR create a user themself, but they need the approval from the IT-Department, so the IT-Department can check the new employees personal data and configure their pc. Or do you have an alternative idea for this process?

asked May 2 by Baul (130 points)
0 votes
1 answer

Hi there, i know the multiple ways of copying the user groups - or all of them within the user creation wizard. I want to copy only a couple of groups ... is it possible to create an approval operation out of an powershellscript? Kind regards, Constantin

asked May 27, 2021 by Constey (190 points)
3,538 questions
3,229 answers
8,224 comments
547,747 users