[Freeipa-users] Any way to delegate subordinate account management to managers?

[Dmitri Pal]

On 12/19/2012 05:11 PM, David Copperfield wrote:
>
> Hi all,
>
>  Just wonder whether there is a way to delegate to managers the
> authority/permissions to manage his/her subordinate user accounts?
> Similar to host/services delegation. Please elaborate if there is a
> way to reach this or similar.
>
> Let's say, we create a user group of subordinate employee accounts,
> then let the particular manager to do the management work for the
> group, like:
>
> 1, reset passwords for the subordinates (main work)
> 2, change/update some attributes of the subordinates.
> 3, if possible, remove one or more subordinate accounts.
>
> Thanks.
>
I think you need to look at the Delegated administration capabilities of
IPA.
https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_Linux/6-Beta/html-single/Identity_Management_Guide/index.html#delegating-users


> --Guolin
>
>
> _______________________________________________
> Freeipa-users mailing list
> Freeipa-users at redhat.com
> https://www.redhat.com/mailman/listinfo/freeipa-users


-- 
Thank you,
Dmitri Pal

Sr. Engineering Manager for IdM portfolio
Red Hat Inc.


-------------------------------
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20121219/4f8c951c/attachment.htm>