PingDirectory

Viewing groups

Use the group reference right to grant delegated admins the right to see what groups a user is a member of without granting group resource management rights.

About this task

To grant a delegated admin the group reference right:

Steps

  • Run dsconfig with the create-delegated-admin-resource-rights option.

    dsconfig create-delegated-admin-resource-rights \
        --rights-name DArights  \
        --rest-resource-type groups  \
        --set enabled:true  \
        --set admin-permission:reference  \
        --set admin-scope:all-resources-in-base

Result

The admin can see the user’s group memberships on the entry preview’s Group Membership tab.