FIM 2010: How to let non-admin group owners manage their groups

by Henrik Nilsson 2. December 2009 18:57

I turns out there’s a lot of things that needs to be in place before this is made possible…

Usage Keyword

Usage keywords are required for letting non-admin users see portal design elements like navigation bar and home page resources but also for letting them being able to use search scopes. The keyword for letting non-admin users take part of these objects is BasicUI…

1. Under Administration and Home Page Resources select the “Manage my SG’s” and add the keyword BasicUI as usage keyword.

image

2. Go back to Administration and select Navigation Bar Resources. Select the “My SG’s” navigation bar resource and add the BasicUI keyword to this one as well.

3. Go back to Administration again and select Search Scopes. Add BasicUI as Usage keyword to the “My Security Groups” Search Scope

MPR’s

There is two MPR’s that allows for group owners to manage their groups. Both of these are disabled by default.

4. Go back to Administration and in to Management Policy Rules. Open and enable these two MPR’s:

  • Security group management: Owners can read selected attributes of group resources
  • Security group management: Owners can update and delete groups they own

image

5. Done!

Conclusion

The usage keyword stuff is poorly documented but I hope this will be better…

Tags: , , ,

Forefront Identity Manager | Portal Management

Copyright © 2009 Henrik Nilsson
Log in

About the author

Henrik - the author Hi and welcome to Stockholm, Sweden!
I'm Henrik Nilsson and the author of this blog.
I do hope you find something interesting during your visit...


More about me...

Contact me...

This site and content is my own work and opinion, it does not necessary reflect the opinions of my employers at Cortego.

Identity Lifecycle Manager

View Henrik Nilsson's profile on LinkedIn

Followers