The Austin Austin Active Directory Department Group Tools Tools are used to manage a Department's groups using a convenient and easy to use web interface. They allow for group management in scenarios where the native Active Directory tools are not installed or where they cannot even be installed such as on a computer running a non-Windows OS.
Roles
The following roles are defined in Groups that were created in a Department OU can also be set up to be managed using the Department Group Tools.
There are three roles within the tool: Department OU Owner, Group Administrator, and Group Manager.
Roles | Group Scope | Available Actions | How Someone Falls into Scope of the Role | ||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
| Groups native to the Department Group Tools | Department OU Owners can add and remove Department Group Administrators. | When a Department OU is created, the requestor provides a list of the initial OU Owners. Department OU Owners can edit (add/remove) owners of the Department OU. If a Department falls in the scenario where there are no valid OU Owners (for example, all of the owners are former staff), the owners can be updated by one of the following processes:
| ||||||||
| Department Group Administrators can create groups, delete groups, and modify all of a Department’s managed groups. |
Department OU Owners manage the Group Admins. In addition, Department OU Owners are considered Group Admins by the Tool’s permission model even if not explicitly declared as Group Admins. | ||||||||||
| Group Managers can add/remove group members. | A group's manager is set by a Department Group Administrator. | ||||||||
| Groups existing within a Department OU | Group Managers can add/remove group members. |
Group Location in AD
...
A Department OU Administrator (or someone else that has been delegated the necessary permissions) sets the Managed By and checks the Manager can update member list checkbox on a group located within a Department OU. |
Add Department Group Administrator
| Status | ||||||
|---|---|---|---|---|---|---|
|
Log into the Department User Tools on https://www.austin.utexas.edu/DeptGroupTools.
From the menu on the left side of the page, under the OU Owners section, click on Edit Group Admins.
Select the desired Department OU from the Select a Department OU drop down list.
The current Group Admins will be shown under Current Group Administrators.
Enter the EID of the new Group Admin.
Optionally check the Exact Match checkbox if you have entered the exact EID to search on.
(For example, when searching abc1 with the checkbox unchecked, the search results will include abc1, abc12, abc123, etc.).Click the Check Names button.
Select the appropriate user in the Search Results.
Click the Add New Admin button.
Remove Department Group Administrator
| Status | ||||||
|---|---|---|---|---|---|---|
|
Log into the Department User Tools on https://www.austin.utexas.edu/DeptGroupTools.
From the menu on the left side of the page, under the OU Owners section, click on Edit Group Admins.
Select the desired Department OU from the Select a Department OU drop down list.
The current Group Admins will be shown under Current Group Administrators.
Select the Group Admin to be removed and click the Remove Selected Admin button.
Create Group
| Status | ||||||
|---|---|---|---|---|---|---|
|
...
Log into the Department User Tools on https://www.austin.utexas.edu/DeptGroupTools.
From the menu on the left side of the page, under the Group Administrators section, click on Create Group.
Select the desired Department OU from the Select a Department OU drop down list.
Under Group Name enter the name for the new group that you are creating. Note that the group name is automatically prefixed with the Department OU Name followed by a dash.
(You do not need to enter the DEPT- prefix when setting the group name.)If you want to have the group synced to Box, check the Enable UTBox AD Group Sync checkbox.
(This will sync the group and its members with UTBox so it can be used to share items.)Optionally provide a description for the new group under Group Description.
This is optional but highly recommended. You can note the intended use of the new group here.Optionally set a ManagedBy Group Name.
Members of the ManagedBy Group will be able to add and remove members of the new group.
If a ManagedBy Group is not set, only Department Group Administrators will be able to manage the members of the new group.Under ManagedBy Group Name, enter the name of an AD group.
Optionally check the Exact Match checkbox if you have entered the exact group name to search on.
(If the checkbox is not checked, the search will apply a wildcard to the end of what was entered).Click the Check Names button.
Select the desired group in the Search Results.
Click the Create Group button
Modify Group
| Status | ||||||
|---|---|---|---|---|---|---|
|
Log into the Department User Tools on https://www.austin.utexas.edu/DeptGroupTools.
From the menu on the left side of the page, under the Group Administrators section, click on Create Group.
Select the desired Department OU from the Select a Department OU drop down list.
Under Select a Group to Modify, select the group that you want to modify.
You can then update the group in one or more ways:
UTBox Sync
You can toggle whether the group is synced with UTBox by checking/unchecking the Enable UTBox AD Group Sync checkbox.
This saved is applied upon checking or unchecking the box.Rename
You can rename the group by entering the desired new name under New Group
...
| Status | ||||||
|---|---|---|---|---|---|---|
|
...
Name. Note that the group name is automatically prefixed with the Department OU Name followed by a dash.
(You do not need to enter the DEPT- prefix when setting the group name.)
Click the Save New Group Name button.Change Description
You can add/remove/change the group's description by entering the desired new description under New Group Description.
Click the Save New Description button.Change ManagedBy
You can change the ManagedBy Group Name by entering the name of an AD group under New ManagedBy Group Name.
Optionally check the Exact Match checkbox if you have entered the exact group name to search on.
(If the checkbox is not checked, the search will apply a wildcard to the end of what was entered).
Click the Check Names button.
Select the desired group in the Search Results.
Click the Save New ManagedBy button.Remove ManagedBy
You can remove the ManagedBy Group Name.
Click the Delete ManagedBy button.
If a ManagedBy Group is not set, only Department Group Administrators will be able to manage the members of the group.
Delete Group
| Status | ||||||
|---|---|---|---|---|---|---|
|
...
Log into the Department User Tools on https://www.austin.utexas.edu/DeptGroupTools.
From the menu on the left side of the page, under the Group Administrators section, click on Delete Group.
Select the desired Department OU from the Select a Department OU drop down list.
Under Current Managed Groups, select the group that you want to delete.
Click the Delete Selected Group button.
View Group Members
| Status | ||||||
|---|---|---|---|---|---|---|
|
Log into the Department User Tools on https://www.austin.utexas.edu/DeptGroupTools.
From the menu on the left side of the page, under the Group Administrators section, click on Managed Group Members.
Under Select a managed group, select the group that you want to view the members of.
The group's current members are listed under Current Group Members.
Add a Group
...
Member
| Status | |||
|---|---|---|---|
|
...
|
Log into the Department User Tools on https://www.austin.utexas.edu/DeptGroupTools.
...
From the menu on the left side of the page, under the Group Administrators section, click on Managed Group Members.
Under Select a managed group, select the group that you want to add a member to.
Under Enter the EID or Security Group Name to Add, enter the user name or group name that you want to add as a member of the group.
Optionally check the Exact Match checkbox if you have entered the exact user name or group name to search on.
(If the checkbox is not checked, the search will apply a wildcard to the end of what was entered).Click the Check Names button.
Select the desired user or group from the Search Results.
Click the Add Member button.
Remove a Group Member
| Status | |||
|---|---|---|---|
|
...
|
...
|
Log into the Department User Tools on https://www.austin.utexas.edu/DeptGroupTools.
From the menu on the left side of the page, under the Group Administrators section, click on Managed Group Members.
Under Select a managed group, select the group that you want to remove a member from.
Under Current Group Members, select the group member that you want to remove.
If the list of members is long, you can search for EIDs that are members by entering an EID to the right of the Find EID button and then clicking the Find EID button. (This only works for EIDs; it will not find departmental accounts or groups.)Click the Remove Member button.
View Group Members
| Status | ||||||
|---|---|---|---|---|---|---|
|
...
Log into the Department User Tools on https://www.austin.utexas.edu/DeptGroupTools.
From the menu on the left side of the page, under the Group Managers section, click on Edit Group Membership.
Under Select a group to edit, select the group that you want to view the members of.
The group's current members are listed under Current Group Members.
Add a Group Member
| Status | ||||||
|---|---|---|---|---|---|---|
|
Logging
All actions taken in the Department Group Tools is logged and sent to Splunk.
Moving a Group from a Department OU to Managed Groups
A department (Owner | Administrator | either?) can request the movement of a group from their Department OU to the corresponding Managed Groups OU.
...
Log into the Department User Tools on https://www.austin.utexas.edu/DeptGroupTools.
From the menu on the left side of the page, under the Group Managers section, click on Edit Group Membership.
Under Select a group to edit, select the group that you want to add a member to.
Under Enter the EID or Group Name to Add, enter the user name or group name that you want to add as a member of the group.
Optionally check the Exact Match checkbox if you have entered the exact user name or group name to search on.
(If the checkbox is not checked, the search will apply a wildcard to the end of what was entered).Click the Check Names button.
Select the desired user or group from the Search Results.
Click the Add Member button.
Remove a Group Member
| Status | ||||||
|---|---|---|---|---|---|---|
|
Log into the Department User Tools on https://www.austin.utexas.edu/DeptGroupTools.
From the menu on the left side of the page, under the Group Managers section, click on Edit Group Membership.
Under Select a group to edit, select the group that you want to remove a member from.
Under Current Group Members, select the group member that you want to remove.
If the list of members is long, you can search for EIDs that are members by entering an EID to the right of the Find EID button and then clicking the Find EID button. (This only works for EIDs; it will not find departmental accounts or groups.)Click the Remove Member button.