On Thu, Nov 29, 2012 at 12:51 PM, Robert Peterson <[email protected]> wrote: > Does anyone recommend a very simple GUI tool that can be used by specific > delegates needing to change “user” attributes. > > The tool needs to be very simple once setup and looking at the correct user > containers. > > The delegates would belong to a “group” that have “write” rights to only > specific attributes… possible? > > > > Thanks for any ideas, > > Robert
Very possible. If I were to put something like this together, I'd do the delegation of the OU or OUs and manually test it using a purpose-built account as the operator. Then, once I had that correct, I'd put together a web site that checks for group membership and presents a page to members of that group. That page would have the required attributes available for modification by allowed users, and it would run under that purpose-built account that has the necessary privileges. That way you aren't directly granting privileges to users, and can easily track changes made via the web logs. Kurt ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
