[Freeipa-users] Any way to delegate subordinate account management to managers?

[David Copperfield]

Hi all,

 Just wonder whether there is a way to delegate to managers the authority/permissions to manage his/her subordinate user accounts? Similar to host/services delegation. Please elaborate if there is a way to reach this or similar.

Let's say, we create a user group of subordinate employee accounts, then let the particular manager to do the management work for the group, like:

1, reset passwords for the subordinates (main work)
2, change/update some attributes of the subordinates.
3, if possible, remove one or more subordinate accounts.

Thanks.

--Guolin
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20121219/81fb2cc8/attachment.htm>