Documentation forAccess Rights Manager

Organizational help for administrators

Besides automated documentation and reports Access Rights Manager also includes a number of additional documentation features. These allow you to add post-its to objects manually or give AD groups aliases with the "purpose groups" feature.

 

Add notes to user accounts and groups

Background / Value

Flag user and group accounts with post-its. This allows you to add tasks directly to individual objects.

 

Step-by-step process

Right-click on an account and select "Add note" from the context menu.

 

  1. Add a note.
  2. Click "Add".

 

  1. Select "Start".
  2. Click "Notes".

 

B009-04 EN Notizen an Nutzerkonten und Gruppen heften

The list shows all notes. With a right click on the note, you can trigger a number of different functions.

 

Purpose Groups: Give aliases to groups

Background / Value

Purpose groups add clear descriptions to AD groups. Often these groups have very technical names and so it is difficult for users or administrators to tell what the purpose of an AD group is. Adding aliases makes the picture much clearer.

The alias descriptions are only visible in the Access Rights Manager views and reports. There are no changes to Active Directory attributes.

 

Create a purpose group

Step-by-step process

Right-click on an AD group. Select "Create Purpose Group" from the context menu.

 

  1. Give the AD group an alias and add a description for the group.
  2. Click on "Create".

 

Delete or modify a purpose group

Step-by-step process

  1. Select "Resources".
  2. Expand "Purpose Groups".
  3. Select the desired purpose group by right-clicking on it.
  4. Select "Delete Purpose Group" or "Modify Purpose Group" from the context menu.

The removal process only affects the purpose group, the added alias in Access Rights Manager. No changes are made to Active Directory.