{"id":3154,"date":"2012-07-17T14:09:25","date_gmt":"2012-07-17T12:09:25","guid":{"rendered":"http:\/\/contoso.se\/blog\/?p=3154"},"modified":"2012-07-17T14:16:47","modified_gmt":"2012-07-17T12:16:47","slug":"idea-around-group-management-with-service-manager-and-orchestrator","status":"publish","type":"post","link":"http:\/\/contoso.se\/blog\/?p=3154","title":{"rendered":"Idea around Group Management with Service Manager and Orchestrator"},"content":{"rendered":"

One of the most common tasks for an IT department is administration of security groups. Security groups are used to control access to most of today\u00e2\u20ac\u2122s applications. Memberships of some groups are modified often, for example group that control access to project work spaces. Often I see this modification handle as a request to service desk that service desk either does it manual or they escalate it to 2nd<\/sup> line that does it manually. Often it is done direct in Active Directory Users and Computers whit a user account that has unnecessary high permissions. The risk of human errors are always there, as often the Active Directory tool is run with a high privilege account and the engineer modifying the group can misunderstand what to do.<\/p>\n

In this blog post I will show a idea how to handle group management with the self service portal in Service Manager and configure Orchestrator to execute all modification.\u00c2\u00a0A nice benefit by using Service Manager is that you get tracking of everything, who submitted the change, who approved it and so on. A nice benefit of using Orchestrator is that is will be done the same every time and no manual steps are required. In this example a manager, a user that is configured as manager on a security group in Active Directory can, with the self service portal in Service Manager<\/p>\n