[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 262
  • Last Modified:

update users profile permission

Dears ,

I need to assign active directory permission to some one to update users' information like first name , last name & Description .

How can i make that in Active directory ?

Thanks
0
GHOSINI
Asked:
GHOSINI
  • 3
  • 2
  • 2
  • +1
1 Solution
 
Radhakrishnan RITCommented:
Hi,

I beleive you can do this by delegating the particular users's OU (Right click the OU where the user resides and delegate)>>Add the appropriate user>>select the task which you would like to assign to that user I.e - Cretae, delete, and manage user accounts or Read all user informations etc..

This way you can assign the task to the user.
0
 
Alex Green3rd Line Server SupportCommented:
Drop them into the account operators group in AD, they'll be able to do it without them having too much access,.
0
 
GHOSINIAuthor Commented:
Members of this group can create, Delete which I don't want to give such permission to that user
0
VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

 
Alex Green3rd Line Server SupportCommented:
Ok, in which case I'd either say if you can't trust them then don't give them the task or as above go through each and every OU that has users and modify that with the rights required.

Depending on your OU structure that could take a while.
0
 
Pankaj_401Commented:
If you do not want to give much access, you can have a look at this utility (http://www.manageactivedirectory.com/) by which you can proficiently manage users right access when they modify others profile in active directory.
0
 
GHOSINIAuthor Commented:
This is what i did

1.) I selected the top level OU and run the delegate wizzard

2.) I added the user i wish to do the modifying.

3.) Selected "Create Custom Task to Delegate"

4.) Selected "Only the Following Objects" and ticked User Object

5.) I then selected Read/Write All Properties Read/Write General Information Read/Write Personal Information
0
 
GHOSINIAuthor Commented:
I've requested that this question be closed as follows:

Accepted answer: 0 points for GHOSINI's comment #a39869950

for the following reason:

was exactly the right one
0
 
Radhakrishnan RITCommented:
This is what i point out in my comment on 18-02-2014

" beleive you can do this by delegating the particular users's OU (Right click the OU where the user resides and delegate)>>Add the appropriate user>>select the task which you would like to assign to that user I.e - Cretae, delete, and manage user accounts or Read all user informations etc..

This way you can assign the task to the user"

I have pointed you in the right direction and you are simply closing the question without assigning any point which is concerned.
0

Featured Post

Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

  • 3
  • 2
  • 2
  • +1
Tackle projects and never again get stuck behind a technical roadblock.
Join Now