0 votes

Hi,

Maybe i'm doing something wrong but i have an issue with permission inheritance :

I have a role (Helpdesk) that gives some users rights to manage Business Units content and to see Business Units objects (in order to get them in Web UI).
I use local security groups for that and it works every scope except BU object.
In order to see BU in Web UI, i have to add explicitely the user account over the BU object.
It happens only for BU objects.

Strange, isn't it ?

by (800 points)

1 Answer

0 votes
by (18.0k points)

Permissions to a local security group can be granted only to AD objects located in the domain of this group. The security role doesn't work because Business Units are not located in your AD domain.

We will investigate how to overcome this restriction, and in the next version it will be possible to grant permissions to local security groups over Business Units and objects from other AD domains.

Thank you for the cooperation!

0

Thanks for the explanation.
Sorry to ask, but do have any information about the next release date ?

0

The next version is scheduled for release in September - October.

Related questions

0 votes
1 answer

I'm having trouble with permissions regarding creating a new user. I created a security role for HR and when they try to create a new user and are prompted for a ... Web Interface, because I just tried it with the Superuser account and it is still blank.

asked Oct 9 by jmatthews (190 points)
0 votes
1 answer

What specific permission is needed in a security role to grant access to enable a user account?

asked Dec 7, 2023 by mightycabal (1.0k points)
0 votes
0 answers

Hello, We create home folders using custom command: Service account to perform operations within the domain has: a) domain admin rights b) server admin rights On the ... user as the directory owner, however the user was granted the Take Ownership permission.

asked Mar 15, 2023 by juhota (210 points)
0 votes
1 answer

I know the question is related to an older version, but where do I find the "Thumbnail Photo Part" in Permissions? The task is: A department should be able to change the Userpicture, nothing else. Thanks

asked Nov 24, 2022 by boris (530 points)
0 votes
1 answer

Hallo Everyone I've seen the Report for Exchange Mailboxes with OU, Send on Behalf, Full Rights and Send As Rights: https://www.adaxes.com/questions/ ... . Example: User: Peter.Steinmann Identity: Which Mailboxes AccessRights: FullAccess Kind regards,

asked Jul 6, 2022 by Sandberg94 (340 points)
3,554 questions
3,245 answers
8,247 comments
547,843 users