Add and remove groups to and from another group automatically

Monotonous AD management tasks can be automated through ADManager Plus' automation feature. ADManager Plus Automation allows you to automatically raise requests to perform tasks and execute them at pre-specified intervals.

When independent financial auditors visit your company for auditing, you need to ensure that they get only limited access to your company's sensitive financial data. As an admin, you need to provide them privileged account access, which can be revoked after audit. Using ADManager Plus, you can easily perform the above-said actions at ease and in bulk.

Suppose, the administrator requires "Auditors" group to be added to "Financial Statements" group for access to relevant resources for, say, 1 week. Using ADManager Plus, you can automatically perform such actions such as adding "Auditors" group to "Financial Statements" group and remove them once the task is executed at a preset time and date.

Steps to configure automation policy

1. Open ADManager Plus.
2. Login with your credentials.
3. Click Automation.
4. From the left pane under Configuration choose Automation Policy.
5. A page with the display of all existing automation policies and their details will appear; to create a new automation policy click the Create New Automation Policy on the top-right corner.
6. Enter "Add and remove groups" in the Automation Policy Name field.
7. Enter "Add and remove groups" in the Description field.
8. In Automation Category section, choose "Group automation".
9. Choose a domain name from the drop down list box.
10. In Instant Tasks section, select "Add groups to group" from the drop-down list.
11. Select "Financial Statements" group from the dialog box.
12. Select Add successive task and select 7 days from the drop down list since the administrator will revoke the access to the selected group after 7 days. In the "Select task" drop down list, select "Removing Groups from group". Click the + icon and select "Financial Statements" group from the dialog box.
13. Click Save.

Steps to configure automation

1. Open ADManager Plus.
2. Login with your credentials.
3. Click the Automation tab.
4. From the left pane choose "Automation".
5. A page with the display of all existing automation and their details will appear; to create a new automation click on create new automation on the top-right corner.
6. Enter "Add and remove groups" in the Automation Name field.
7. Enter "Add and remove groups" in the Description field.
8. In Automation Category section, choose "Group automation".
9. Choose a domain name from the drop down list box.
10. In Automation Task/Policy section, select "Add and removing groups" under Automation Policy in the drop down list.
11. In From Report section, select "Group Members" and select the Group name "Auditors" in the "Group Reports" section. Click OK.
12. In Execution Time section, specify the time/interval at which the task should be run. For example, if the auditors should be provided access for 1 week every year, select More from Run at section and select a preferred date, time. and frequency.
13. Enable notification to set Email and SMS alerts to notify users about the execution of the automated task.
14. Finally, click Save to save the automation.

Back to Automation usecases