UMRA Delegation - General

With UMRA you can delegate tasks to other users. These users do not need to have administrative privileges, but they are able to submit UMRA forms. The functionality of an UMRA form ranges from very simple tasks to complex operations:

• reset password

• unlock account

• set user account properties

• set Active Directory attribute

• create user account (+groupmemberships, mailbox and home-directories)

• move a user account to another OU

• delete a user account and all associated resources

For each UMRA form project, you can define the user accounts that are allowed to executed the form and script of the project. To setup delegation with UMRA, you need to fullfill the following steps:

1. Create form projects with UMRA console. The form projects include the definition of the form, the script and the security settings.

2. End-users start UMRA forms and connect to the UMRA service. The UMRA service determines the access rights of the connecting users and shows the forms the user is allowed to submit.