Imanami Community

Hi,

I am looking for a way to restrict users in Self Service so that they can create groups only in a specific container or organizational unit. Is there a way to achieve this?

Hi Achilles,

You can set a default container for creating Groups in Self Service. In order to achieve that, you will just need to define a setting called NewObject.Container on the Settings tab in Self Service Portal.

Please follow these steps to define this setting:

On the Server node in Self Service Portal, go to the Settings tab and click the Add button as shown in the screenshot below:

 Add Setting dialog box appears.

Select NewObject.Container from the Key drop down list.

Specify the path to the Container in the Value field. Suppose, you have an Organizational Unit called User Groups which you want to set as the default container and your domain name is techworld.com, then you will need to configure the path to the OU as shown in the screenshot below:

 Click OK

Save the changes by clicking the Save button as shown in the screenshot below:

Now launch the portal and login with any user. You will have a default container pre-populated and the Browse button will be grayed out as shown in the screenshot below:

Note: If this setting is not applied, Reset you IIS server and then launch the portal.

I hope this will help you achieve your desired functionality. 

Hi Asif,

Thanks for the detailed explanation. I was able to set the default container by following the procedure you explained. However, this setting is being applied to all the users. Even my domain admin account is not being able to select a container to create the group. I dont want this setting to be applied to my domain admins and some other users. Is there a way to achieve this?

Hi Achilles,

You can assign a group as Administrators for the Self Service Portal. Once you do that, every member of that group will be exempted from this restriction.

Here is how you can do that:

Create a group name SSP Admins ( You can use any name) in Active Directory.

Add all of your desired users and groups into SSP Admins group.

On the Server node in Self Service Portal, go to the Security tab.

Click the Browse button next to the Administrators Group field.

Type SSP Admins on the Select Recipients dialog box and click OK

Click on the Save button to save the changes.

This will assign SSP Admins as the Administrators Group for the Self Service Portal and every user who is a member of this group will be able to browse and create Groups in their desired containers.

I believe you will be able to achieve your desired functionality by following the procedure explained.

Hi Asif,

I followed the procedure you explained and it worked.

Thanks