In Arellia Management Server, you can limit the resources that users can access. By default, all Administrators, Users, and HelpDesk Role users have access to all computers and user account passwords in Arellia. To change the default access, do the following steps:
- First, create and sync your Active Directory. (For instructions about how to sync your Active Directory, go to Sync Active Directory.)
- In the Arellia Security Manager, click the Configuration tab.
- In the file library in the left pane, navigate to Settings > Configuration > Resource Settings > Resource Types > Computer.
- In the right pane under Settings > Security Scope Set, click the Select... link.
- In the Select Item dialog box, click Active Directory Domains.
- Click OK.
- In the right pane, click Save. (Note: You might need to scroll down to see the Save button.)
- Click the Resources tab.
- In the file library in the left pane, navigate to Organizational Views > Active Directory Domains.
- Click Active Directory Domains.
- Right-click an Organizational Unit that you want to change the access of and click Properties.
- Click the Security tab.
- Select Security descriptor and click the Select... link.
- Click the security descriptor you want to change.
- Click Save.
- Repeat for further security descriptors as needed.
By default, only Administrators and Users will have access. It is important to change the security descriptor on all organizational units that help desk users should have access to.
After making the changes above, users will only be able to see resources in the organizational units that they have access to.
Administrator User:
Scoped Helpdesk User:
