Delegation
Users take on responsibility
Delegate simple IT-related routine tasks to others:
Tap the full potential of your employees.
The user perspective
The HR department, team leaders or users want to administer their team as efficiently as possible.
Without calls to the IT-department and with no further delays.
Managers and employees want to:
fulfill their tasks independently
save time
quickly make headway
Each employee can take on customised tasks thanks to IDM-Portal’s role-based delegation.
They do not need specialist IT-knowledge. IDM-Portal gets all the technical jobs done in the background:
The solution
Delegate AD-related tasks to users without handing over control
With the user-friendly FirstWare IDM-Portal you can delegate the maintenance of AD data to non-IT-administrators.
AD delegation happens in a simple and secure way via predefined roles.
As a result, system administrators have more time for other important tasks.
Effective role-based AD delegation
FirstWare IDM-Portal provides flexible types of roles. Assign these roles, which you pre-define with certain permissions, to individual employees or departments. This allows your colleagues to look after different tasks without you ever giving away overall control.
HR department
Employees
HelpDesk
Team leader
IT-administrator
Personal assistant
What can I delegate to my departments?
With FirstWare IDM-Portal you achieve a simple and fast division of work between AD administrators and other departments.
Daily administrative tasks take up a lot of time in IT. Allow your non-IT-qualified staff to get these done in a fast and comprehensible way.
HR department
- Edits contact details
- Deactivates user accounts
- Makes name changes
- Resets passwords
- Manages user accounts
Employees
- Uploads own profile photo
- Changes address (street, postcode, city)
- Updates own telephone numbers
- Asks for permissions (approval workflow)
- Employee Self Service
HelpDesk / IT-coordinator
- Creates, edits and deletes users
- Resets passwords
- Moves user objects to another OU
- Manages access rights of users
- Creates, edits and deletes groups
Team leader
- Gives access to the team drive
- Manages all members of the department
- Controls access rights
- Looks after e‑mail distribution lists
- Assigns permissions within the team
IT-administrator
- Manages processes
- Maintains csv templates
- Moves users to another OU
- Handles device management
- Looks after technical side of user management
Personal assistant
- Keeps contact details of the team up-to-date
- Prepares inactive user accounts
- Takes on tasks from the head of department
- Updates e‑mail distribution lists
- Adds holidays into the phone book
How do I delegate?
With IDM-Portal’s Role Based Access Control (RBAC) you can customise access rights to data in Active Directory for individual user groups. Basically, AD delegation with no training required.
Which attributes can be edited? Which functions are activated? What can be automated?
You determine the scope of the roles — we support you with best practises.
Read, write and hide
You define exactly who can edit and search for what data and where.
And not only which attributes a role can read or write.
You authorise the following features for your roles:
- search functions
- editing of attributes
- access rights
- managing of devices
- and many more
Customise IDM-Portal together with us so that it suits your organisation. Additionally, we can automate tasks and speed up your processes.
The advantages
On a longterm scale, FirstWare IDM-Portal will reduce your costs significantly. User management is delegated to the relevant departments. IT administrators can focus again on important, more complex tasks.
Time and cost savings
Accelerated administrative processes
Improved data quality
Easy granting of permissions
Controlled access via RBAC
Reduced workload for your IT
Tip from the expert
With FirstWare IDM-Portal you can generate passwords and activate (or lock) user accounts with just a few mouse clicks. These typical IT admin tasks can be delegated in a secure and comprehensible way to non-IT-qualified employees.