Delegated Admin lets delegated administrators complete tasks across groups, subtrees, and entire organizations.
Tasks include:
- Create, view, and search user profiles.
- View user account information, including account status, last login time, and password expiration date.
- Update user attributes.
- Implement constructed attributes.
- Set attributes to
read-only
. - Enable and disable accounts.
- Reset locked accounts.
- Create and edit groups.
- Manage the membership of groups and subgroups.
- Manage the roles of users and groups.
- Delete users, groups, and generic resource types.
- Implement custom UI form fields.
- Select user entries based on their distinguished names (DNs) without displaying the actual values of the DNs.
- Preview and download reports about user profiles. Reporting provides the following
features:
- Capability to report for resources of a given type, or limited to members of a group
- Ability to display multiple values per attribute for each user
- Protection against spreadsheet formula injection
- Upload CSV files to add user, group membership, or organizational unit (OU) records.
- Trigger a password reset process for a user that invokes the self service password reset process defined by the business