How to grant rights to create users in Active Directory using ADManager Plus

ADManager Plus allows you to securely delegate tasks to help desk technicians and other non-administrators by granting only those permissions required to complete their job role. You can create custom help desk roles and granularly delegate ADManager Plus' templates, attributes, and more, to help desk technicians without affecting their Active Directory (AD) permissions.

Steps to grant AD user creation rights in ADManager Plus

The first step in granting AD user management permissions–specifically to create users–is to create a help desk role in ADManager Plus.

Steps to create a user creation help desk role in ADManager Plus

1. Log in to ADManager Plus and navigate to the Delegation tab.
2. In the left pane, click Help Desk Roles.
3. Click + Create New Role.
4. Provide a suitable name and description for the Role Name and Description fields.
5. In the list of actions displayed, navigate to user Management > Bulk User Management.
6. Select the Create Users option.
7. If you would like to restrict access to specific user attributes, click User Attributes Privileges.
8. In the popup, uncheck the desired attributes and click OK.
9. Click Save to save this help desk role.

Once a help desk role is created, it has to be delegated to the desired help desk technician.

Steps to grant user creation rights to help desk technicians

1. In the left pane, click Help Desk Technician.
2. If you'd like to grant user creation rights to an existing technician, click the edit icon in the Actions column of the help desk technician and assign the role that we just created.
3. If you would like to create a new help desk technician, click +Add New Technician.
4. Select the desired domain and users.
5. In the Select Help Desk Roles field, select the user creation help desk role.
6. In the Select OUs field, select the OUs over which the technician can perform the delegation action.
7. Check the Impersonate as Admin option to assign admin permissions to the technician for performing the delegated task.

   Note: Enabling this option does not alter the AD permissions of the technician.

8. Click Save.

You can audit the delegated tasks using ADManager Plus' help desk audit reports.