Whitecap Resources finds a powerful access management solution in ADManager Plus

Business challenges

• Complex Active Directory permissions management: Managing granular permissions within Active Directory (AD) was time-consuming and prone to errors, requiring significant effort from Whitecap Resources' infrastructure team.
• Inefficient user onboarding processes: The lack of standardized templates for user creation led to delays in onboarding, hindering the organization's ability to respond swiftly to business needs.
• Limited visibility into user access and licensing: The absence of comprehensive reporting tools made it challenging to monitor user access rights and licensing, impacting administrative efficiency and security oversight.

The problem

According to Ryan Kuffler, Whitecap Resources' infrastructure team lead, the organization grappled with the complexities of managing delegated permissions for its Active Directory users. The process was not only labor-intensive but also fraught with the risk of privilege creep, where users receive more access than what is required by their job functions. Additionally, the absence of standardized user creation templates resulted in inconsistent onboarding processes, thereby delaying the onboarding process of new employees. The lack of robust reporting tools further compounded administrative issues, as administrators struggled to gain insights into user access levels and licensing, making compliance and security audits more challenging.

The solution

To address its identity management challenges, Whitecap implemented ADManager Plus, ManageEngine's identity governance and administration solution.

With ADManager Plus, Whitecap's IT team could delegate and monitor the specific permissions to help desk technicians: in this case, allowing them to manage only the Organizational Units (OUs) relevant to their roles.

ADManager Plus' precise delegation capabilities ensured that technicians had necessary levels of access without compromising the security of the broader AD environment.

ADManager Plus' standardized orchestration templates, such as the one for user creation, helped Whitecap's IT team automate identity lifecycle management tasks at scale. These templates allowed the infrastructure team to define standard attributes for new users, ensuring consistency and reducing the time required to set up accounts.

ADManager Plus' comprehensive reporting capabilities provided Whitecap's IT team with valuable insights into user access rights, group memberships, and licensing.

Kuffler heaped heartwarming words of praise for ManageEngine's support team. Emphasizing the prompt and result-oriented interactions Kuffler had the support team.

About ADManager Plus

ADManager Plus is an identity governance and administration (IGA) solution that simplifies identity management, ensures security, and improves compliance. With ADManager Plus, manage the user life cycle from provisioning to deprovisioning, run access certification campaigns, orchestrate identity management across enterprise applications, and protect data on your enterprise platforms with regular backups. Use over 200 reports to gain valuable insights into identities and their access rights. Improve the efficiency of your IGA operations with workflows, automations, and role-based access control policies. ADManager Plus' Android and iOS applications help with on-the-go AD and Azure AD management. For more information about ADManager Plus, visit https://www.manageengine.com/products/ad-manager/.