Summary
The Request Requests By Attribute process allows department administrators to sumbit requests for restricted protected actions in the Austin Active Directory via attributes on specific objects.
Overview
This Request Requests By Attribute process is comprised of the following parts: a request JSONstring, the requests attribute, the request script, a result JSONstring, and the results attribute. The request JSON string is a JSON string that contains the required properties and values for the request. A department administrator will create the request JSON string then write add the value to the multi-valued requests attribute on a department's administrative OU (see Organizational Units below) to submit the request. The request script runs every hour and removes the original request JSON string from the requests attributes on the department's administrative OU then attempts to fulfill attribute then processes therequest. The result JSON string is a JSON string that contains the results of the request along with the original request string. The request script writes will generate the result JSON string after processing a request then add the value to the multi-valued results attribute on the department's administrative OU. Any errors encountered by the delegation process are included in the result JSONstring.
Organizational Units
The Request Requests By Attribute process interacts with both is centered around a department's Department OU and Adminstrative OU. Each department's Department OU is the named OU in the Departments container at the root of the domain (ex. "OU=TEST,OU=Departments,DC=austin,DC=utexas,DC=edu" or "austin.utexas.edu/Departments/TEST") and contains resources managed by the department such as computer and group objects. Each department's Administrative OU is the named OU in the Departments container under the Administrative container at the root of the domain (ex. "OU=TEST,OU=Departments,OU=Administrative,DC=austin,DC=utexas,DC=edu" or "austin.utexas.edu/Administrative/Departments/TEST") and contains resources managed by the Department User Tools such such as department user accounts and membership in the department's OU administrators group (ex. TEST-Administrators).
Attributes
The Request Requests By Attribute process utilizes the following attributes on a department's Administrative OU object. The selected attributes are confidential and cannot be accessed by default. The specific attributes and the permissions granted to the attributes are as follows:
- The requests attribute is the utexasEduAustinMulti1 attribute on a department's Administrative OU. Department Adminstrators can read and write to this attribute to submit a request.
- The results attribute is the utexasEduAustinMulti2 attribute on a department's Administrative OU. Department Adminstrators can read this attribute to review the results of request processing.
Supported requests
The Request Requests By Attribute process supports the following request types:
- Delegations - Department administrators can request permission changes to organizational units within a department. This process has previously been available only via a ServiceNow request.
Planned requests
The Request Requests By Attribute Attribute process is expected to support the following request types in the future:
- DNS - Department administrators can request changes to DNS changes for records associated with the department.
...