Role Based Access Control/Priviledged accounts

[Cola123]

#155049

Hi,

I’m trying to set up a system of role based administration/access control, by delegating administrative rights to varying degrees to different groups in AD.

So i coul have say .. a helpdesk group, a desktop support group, a server support group etc.

When you delegate control to a group it seems you either have a short list of generic admin rights you can delegate or you need to delegate specific ldap rights (or combinations of rights) to a group.

Does anyone know where there is a good guide which clearly explains which ldap rights (or combination of rights) are required to perform administrative tasks?

thanks

Simon

[Author]

Posts