Limit areas that are presented when running a report

Question

I am using Adaxes to provide self-administration to small groups of users over select areas of the infrastructure. Specifically the management of Windows groups within an OU that requires quick turnaround and has a high volume of change.

The Web UI is very locked down and clean to simplify things and limit what the user can see or do. Everything is working fine, but I'd like to give the users the ability to run reports. However, when I include the reports tab, it defaults to everything being searchable, so a user that is only responsible for half a dozen groups can search the rest of the AD infrastructure and find out who is in what group.

Is there any way to inhibit the reporting scope to only include the OU that the user has responsibility for, and the the rest of AD?

Thanks

Answer 1

Hello Molly,

In Adaxes, if a user does not have sufficient permissions to view an Active Directory object, the user will not see the object anywhere in Adaxes: neither in the Administration Console, nor in the Web Interface. The same applies to Reports. So, if you hide the unnecessary groups with the help of Security Roles, the users will not see those groups in AD Reports.

For information on how to hide AD objects from users, see the following tutorial: http://www.adaxes.com/tutorials_Delegat ... mUsers.htm.

Also, in Adaxes 2014.1 (to be available by the beginning of 2014) we are going to completely rework the Reports feature. We'll think on how we can provide the possibility to limit the scope of reports for different categories of users.