Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Warning

DRAFT

Overview

PFA will allow department administrators to use Active Directory attributes to apply permissions to objectscustomers to update permisssions on Active Directory object by setting the correct values on specific attributes. Initial implementation is focused on on Organizational Units.

Parameters

  1. Define <action-attribute> for query
    • utexasEduAustinBool1
    • Value must be true to grant permissions
  2. Define <permission-attribute> for query
    • utexasEduAustinSingle11
    • Value must be one of the existing Delegation values
  3. Define <targets-attribute> for query
    • utexasEduAustinMulti11
    • Values must be DN of a group object
  4. Define <reports-attribute> for results
    • utexasEduAustinMulti12
  5. Define <object-class> for query
    • organizationalUnit
  6. Define <container> as search base for query
    • OU=Departments,<domainDnsRoot>

...