How to show the members of a business unit in the web client?

Question

Hi,

I'm trying to create a web console only for sending SMS using adaxes 2018.2. The SMS-users that are going to use the console should only be able to view users, not edit them. The user accounts (who should receive SMS) are spread across a huge number of OUs, and because of that I have created a business unit to collect them.

I have created a security role for the web console, and delegated rights to the users. In the permissions I have tried initially to give only the read-permissions for Business Units and Users. In Assignments I have assigned a security group (which the SMS-users are a member of) to the Business Units I have created, plus all the OUs that the users are coming from. I have tried ticking off only "members of the Business Unit", and both as showed below

I have also tried giving the users full access to all permissions , as I cannot understand why the SMS-users cannot view the Business Units that I have delagated permissions to.

In web configuration, I have ticked off "Display the Business units node" in Navigation

The SMS-users cannot view any business units in either the Adaxes Administration Console (GUI), or the Web Console. This is what it looks like for a user with the permissions mentioned over:

What am I doing wrong?

The only thing I can think of is that the SMS-users security group also is a member of the Blind User Security Role, which removes a lot of OUs that the users should not see or be able to browse to.

Answer 1

Hello,

You need to make sure that there are no Security Roles assigned to the users that deny the permissions to see Business Units and their members. For your information, Deny permissions always override the Allow ones. As such if there are two roles assigned to a user, one granting a permission and the other denying the permission, finally the user will not have the permission. For information on how to view Security Roles assigned to a user or group, have a look at the following help article: https://www.adaxes.com/help/?HowDoI.ManageSecurityRoles.ViewSecurityRolesUserGroupPerforms.html.

If you are still not sure about the required roles configuration, please, post here or send us (support[at]adaxes.com) screenshots of all the Security Roles assigned to a user whose credentials are specified at sign in during tests with assignments. We need something like the following for each Security Role: