Delegation of dynamic groups

IT Admin delegates group management

With DynamicGroup Delegation mode you enable teamwork to AD group management.

Let local IT coordinators maintain their dynamic security groups.

Delegation Mode features

Share AD dynamic group management
OU admins maintain automated groups
Allow service and configuration tab

The delegation of mode of DynamicGroup enables local OU admins
to maintain self-updating security groups by themselves.

Benefits

Security

Local admins only manages dynamic groups in the OUs they should.

Time-saving

Save time by sharing IT Admin tasks with local helpdesks.

Clear Overview

Gain visibility by seeing only what is important for you.

Helpdesk maintains dynamic AD groups

An IT admin wants to delegate the maintenance of a few dynamic security groups in Active Directory.
Local helpdesk or IT coordinators should only see OUs they have to manage.

Example: In an international company, the IT Admin wants to delegate AD group management:

Local helpdesk Germany (1): dynamic group memberships for German sites
Local helpdesk US (2): dynamic security groups of office in the United States

Both local helpdesks need to manage their groups – without being able to see or edit the rest of the AD Tree.

With DynamicGroup 2020, each helpdesk can only see and manage the OUs it has the permission to.

Delegation based on location or department OUs is now possible.

How to give permissions to OU admins

1. Step – Active Directory Users and Computers

The IT Admin gives different permissions to each local OU admin / helpdesk in the Active Directory Users and Computers Console. This is usually done with the Active Directory Delegation wizard.

The HQ admin himself/herself keeps full control of the AD tree.

DynamicGroup in admin view allows access to AD tree and services.