UMRA Simplifies User Account Management

Complete Linkage with Active Directory

The User Management Resource Administrator (UMRA) software from Tools4ever offers a complete interface/linkage with Active Directory. With the interface, it is possible to have automatic execution of every desired action on Active Directory. Examples of actions are: resetting passwords, removing/adding group memberships, changing (extended) attributes, creating/removing/modifying user accounts, etc. As long as Active Directory supports the processing, technically, it is possible to carry out the action via UMRA.

The following automatic links to Active Directory are possible:

Bulk Import to Active Directory

The UMRA console offers the option of carrying out a bulk import to Active Directory via a variety of input formats. Some examples of these formats are: plain text, CSV, XML, Webservice, SOA, SOAP, other LDAP store, ODBC, and Oracle.

Three issues are specified in the UMRA console:
   1) What actions have to be carried out on Active Directory; this results in a visual script;
   2) Where the input will come from (CSV, ODBC etc.);
   3) Determining the run mode.
UMRA supports an extensive test mode to check whether the input and actions will produce the right results.

Bulk import on Active Directory is particularly attractive for migrations, schools (beginning/end of the school year), bulk creation of new employees, adding a telephone number in Active Directory, etc.

Delegated Management to Active Directory

The standard management tools for Active Directory are limited. The tools do not enforce a standardized method of user account management. Therefore it is only possible to a limited degree to regulate the administrative rights on Active Directory, and logging for compliancy is not enforced. UMRA offers a delegated interface (via a set of electronic forms) which allows a helpdesk assistant or other user to work in a secure manner. The helpdesk assistant can only use the forms to manage Active Directory. The actual operations are carried out through the link with Active Directory where inherent limitations are avoided.

Auto Provisioning to Active Directory

Information for managing user accounts in Active Directory is often available in a different information source in your organization’s network. An obvious source is the HR system but there could also be a different source such as an LDAP store, flexpool (temporary employees) and/or a planning system. UMRA detects the change — for example a new contract — in the source system and converts this, through a series of UMRA actions, into the required additions in Active Directory. UMRA ensures that all the changes are carried out 100% automatically and in doing so, takes care of issues such as: unique naming, group membership and notifications to relevant managers

Self-Service Active Directory

There is often a need within an organization to allow employees themselves to modify their own details in Active Directory. It is important here that employees may only modify their own details as well as a restricted number of fields (attributes). Alongside being able to modify their own details, it is also possible that employees are able to view the details (name, e-mail address, telephone number etc.) of all users.