Modifying MPRs for group management
There are many MPRs that control how group objects can be modified by self-service, administrators, or synchronization engine. But when it comes to group management, almost every MPR is disabled by default.
Let's look at distribution groups, to start with.
The Company only wants Employees to be able to create static distribution groups. The following steps will be required, to allow that:
- Enable and change the MPR Distribution list management: Users can create Static Distribution Groups. The MPR allowing the creation of this type of group is Distribution list management: Users can create Static Distribution Groups ...
Get Microsoft Forefront Identity Manager 2010 R2 Handbook now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
