Modify folder permissions automatically

Implementing the principle of least privilege (PoLP) across the organization can be a resource intensive activity. Automating this process would reduce the burden on IT administrators who manually have to perform this for all employees throughout the organization. Automation of access permissions ensures time, cost and labour efficiency, and more importantly, security as well, in one go. For example, consider a scenario where the access permissions need to be modified for multiple users. ADManager Plus can help you automate the process securely in a few steps.

1. Logon to ADManager Plus.
2. Navigate to Automation tab > Automation > Create New Automation
3. Enter a suitable Name and Description for the automation.
4. For the other sections,
   • Automation Category - Choose User Management.
   • Domain - Choose the domain and OUs where the task should be run in.
   • Automation Task/Policy - Choose " Bulk modify Folder permissions using CSV" from the drop down list.
   • Location of CSV - Choose the location of your CSV file which contains the list of users for whom the permissions are to be modified along with their corresponding folders, permissions and access levels. Click on Sample CSV to view the sample CSV for modifying folder permissions, if needed.
   • Implement Business Workflow - Enable this option if you want the user permission modification to be carried out only after approval. This option will automatically create a workflow request; once it is approved by the appropriate technician or user mentioned in the workflow, the required permissions will be modified in AD. You can know more about workflow here.
5. Select the Execution time and Frequency at which you want the automated bulk permissions modification to be done.
6. Enable the Notification option if you wish to notify the technician every time the automation gets executed.
7. Click Save.

With ADManager Plus' automation options, you can also automatically provision permissions when a user account is being created, modify the permissions when an employee moves from one team to another or if they are promoted, configure time bound permissions that will be revoked after the specified time limit, and more.