Overview
Use this action to view and modify properties of Active Directory group in Cayosoft Administrator Web Portal.
Group Properties web action settings
Action section
Setting name |
Description |
---|---|
Limit scope to this Domain or OU |
This setting is deprecated. |
Member properties to display |
Specify columns for AD Group members query. You should specify LDAP property names. The default set of columns is taken from the Default columns for AD Group members query defined in Active Directory extension > Customize columns section. |
More Options |
|
Override Active Directory domains Show Ticket input field Show Comment input field |
For the information about these settings, please refer to the More Options description in New User web action. |
Show secondary owners |
Specify if secondary owners should be displayed for all groups or for distribution lists only. |
Allow membership changes for these groups |
Specify the groups for which membership changes are allowed: Any group listed on the form or Only from groups located in the Admin Unit scope and Additional scopes. If you have a set of AD groups that are managed centrally and you do not want to delegate Admin Unit administrators permission to remove accounts from these groups, set this setting to Only from groups located in the Admin Unit scope and Additional scopes. You might also need to set the Additional Scopes setting on the AD Users web query, see the AD Users web query for article details. |
Enumerate group members and its properties |
Specify the way how to enumerate group members and its properties:
|
Resolve and show member display names (legacy) |
For details, please see the description of Create Active Directory object cache setting in Active Directory extension. |
Maximum membership for display name resolution (legacy) |
Limit the maximum membership for display name resolution, otherwise, it could affect the performance. |
Group name prefix |
You could set group name prefix for all created groups. |
Enforce Group name prefix |
If group name prefix specified, you could enforce Group name prefix to group alias or to all naming attributes. |
Character Restrictions |
|
Prohibited or Allowable |
Select whether prohibited or allowed the symbols specified in settings below. The default value is Prohibited. |
Symbols in Name Symbols in Alias Symbols in Primary SMTP prefix |
Enter prohibited symbols without spaces or if using the Allowable option, enter a regular expression enclosed in single quote marks. By default, the prohibited symbols are '@' and '–'. |
Other Attributes |
|
Other Attribute 1 - Other Attribute 20 |
If you use Active Directory extension attributes to store additional information for groups, you could select these attributes and map them to Other Attributes. To set labels or default values for these attributes, please use Attribute Policies. Note: Multi-valued attributes are not supported in Other Attributes.
|
Virtual Attributes |
|
Virtual Attribute 1 - Virtual Attribute 25 |
Virtual Attributes allow extending the attribute list for groups in Active Directory without extending the Active Directory schema. Select the virtual attributes from the list and map them to Virtual Attribute 1 - Virtual Attribute 25. For more details, please see Configuring Virtual Attributes article. |
Output Section
This section defines the output format of this rule.
To get more information about this section, please see the Output section article.
Change History
Version | Notes |
---|---|
9.3.0 | Show secondary owners setting has been added. |
9.1.0 | Domain Controller and Credentials settings have been removed. |
7.2.0 |
|
6.2.0 |
Stored Virtual Attributes for Active Directory groups are introduced in the product. |
6.1.0 |
New settings are added:
These settings are renamed:
|
Comments
0 comments
Please sign in to leave a comment.