Global Administrative Unit for Global Search (7.x version)

Content: 

Overview

Typically, each group of delegated admins is supplied with a dedicated Administrative Unit, where they have required permissions and which they use to locate and manage users and groups. Sometimes, it is needed to provide a search across all Administrative Units. In this case, Global Administrative Unit needs to be configured.

Global Administrative Unit derives its scopes from the Standard Administrative Units delegated to the current administrator. Global Administrative Units allow a delegated admin to perform searches across all of his Standard Administrative Units without the need of knowing which Standard Administrative Unit the object can be found. This is often used to simplify the searches performed by a centralized help desk.

Configuration of Global Administrative Unit

1. In Cayosoft Administrative Console navigate to Admin Units (Web Queries)

   (In web Queries each folder represents an Administrative Unit)

2. Click the Active Directory Administrative Unit

3. Click Copy Rules on the Action menu -> The Copy Rules Wizard will appear

4. Specify a new name - Global search, for example

5. Click Create delegation for Web Administrators

6. In Limit Scope to this Domain or OU select Use scopes from delegated Web Queries (GC Search). This would force Cayosoft Administrator to contact Global Catalog and search across the entire AD forest.

   Tip: Change Global Catalog in case automatically selected DC is causing delays and interruptions in Global Search functionality and automation rules.
   

7. In More Options section in Domain Controller select Default Domain Controller (GC)
   

8.  Click Copy

Delegate access to Global Administrative Unit

1. In Cayosoft Administrative Console navigate to Configuration > Roles > Web Administration

2. Locate the Delegation rule with the same name as the Global Administrative Unit to which you wish to grant access.

3. In the Trustee section, click Add
   
   

4. Browse for the user or group that will have access to the Global Administrative Unit

5. Click OK

6. Click Save Changes to complete the delegation

7. Login to the Cayosoft Web Administrator Portal to verify the Global Administrative Unit was created as expected