access for HR to update contact info

Question

what kind of security role and permissions would I need to set up for our HR director to access the web interface so that she can do the following

• update user contact info including
  • phone numbers
  • title
  • direct reports
  • manager

Answer 1

Hello,

You will need to create a Security Role which grants permissions to modify specific properties of AD objects and assign the role to the HR director. The assignment scope has to include all users that you would like the HR director to be able to modify. For information on how to do this, please, have a look at the following tutorial https://www.adaxes.com/tutorials_DelegatingPermissions_GrantRightsToModifySpecificProperties.htm.

In the Security Role you need to add the Allow Write permissions for the following properties:

• Any of the phone number properties, which by default include Telephone Number, Mobile Phone, Home Phone, IP Phone, Telephone Number (Other), Mobile Phone (Other), etc.
• Job Title property.
• Manager property.

The Direct Reports property contains backlinks to the user objects for which the account is specified as Manager. The property is managed by Active Directory and cannot be edited manually. For each user that you would like to be a direct report of someone, you need to edit their Manager property.

For information on how to allow the HR director to access a specific Web Interface, please see https://www.adaxes.com/tutorials_WebInterfaceCustomization_AllowDenyAccessToTheWebInterface.htm.