Just wonder whether there is a way to delegate to managers the
authority/permissions to manage his/her subordinate user accounts? Similar to
host/services delegation. Please elaborate if there is a way to reach this or
Let's say, we create a user group of subordinate employee accounts, then let
the particular manager to do the management work for the group, like:
1, reset passwords for the subordinates (main work)
2, change/update some attributes of the subordinates.
3, if possible, remove one or more subordinate accounts.
Freeipa-users mailing list