In ADManager Plus you can configure requester roles, which you can later associate with help desk technicians or users. These roles define who can raise requests for what AD management actions.
The workflow requests raised by the requestors can be reviewed by the manager of the requestor and/or the manager of the team in which the action will be performed. For example, if a help desk technician has been delegated the task of user creation for HR department OU, you can configure the helpdesk requests to be executed only if it is approved by both the technician's manager and the HR department's manager.
Whenever a requestor, who is part of a group which has the permissions to perform AD tasks is disabled or removed from group, the appropriate permissions will also be automatically revoked for the requestor.
Steps in configuring requester roles:
Note: You can click on the edit icon next to the list of requesters to configure file servers for them. If you want to add a shared folder, select the file server to view and add the shared folders.