Active Roles
03:13
Key benefits
Increase security
Deploy Zero Trust Least Privilege for AD
Delegate permissions based on role to ensure only those who should have access to a given application do, and only for as long as they need it. Find out more
Ensure data integrity and compliance
Maintain accurate data and reporting
Use automation to ensure accuracy and consistency. Audit capabilities provide compliance reporting at your fingertips.
Simplify the management of complex environments
Consolidate onto a single console
Consolidate all AD domains, Entra ID (Azure AD) tenants and Microsoft 365 onto a single console, ensuring better visibility and control over your entire Microsoft environment.
Establish and maintain consistency
Synchronize Directories
Sync multiple data sources across the organization for data consistency and improved security and efficiency.
Bolster efficiency
Automate AD tasks and group management
Automate tasks to ensure accuracy and consistency and reduce manual demands. Easily manage identities and groups and move identities and objects among groups when needed, to accommodate role changes.
Features
Hybrid Active Directory, Entra ID and Microsoft 365 security and management
Fine-grained delegation with least privilege access and role-based access control (RBAC)
Efficient group management and role management
Lifecycle management, automation, scripting and workflows
AWS directory support
Synchronization
Discovery and management of stale objects
Data consistency, auditing and logging
Capabilities
Hybrid AD ready
Secure access with role-based delegation and least-privilege access
Automates AD administration
Active Roles excels at automating provisioning of user access rights in AD, AAD and AD-joined systems (including user and group de-provisioning) to ensure an efficient and secure administrative process over the user and group lifecycles. Active Roles automates a wide variety of tasks, including:
- Creating user accounts and groups in AD and AAD
- Extending AD/AAD-based account administrative actions to non-Windows systems
- Creating mailboxes in Exchange and Exchange Online
- Populating groups across AD and AAD
- Assigning resources in Windows
When a user’s access needs to be changed or removed, updates are made automatically across all relevant systems and applications in the hybrid AD/AAD, and AD-joined environment. This includes UNIX, Linux and Mac OS X.
Simplifies administration and account lifecycle management and security
Active roles allows you to view and manage multiple AD domains, Azure AD and O365 tenants from a single pane of glass, simplifying administration across your identity ecosystem. With Active Roles, you can manage objects, users and groups, securely synchronizing attributes and passwords from the client domain to the hosted domain. The following can be managed for on-prem, cloud and hybrid environments:
- Exchange recipients, including mailbox/OCS assignment, creation, movement, deletion, permissions and distribution list management
- Groups
- Computers (including shares) printers
- Active Directory security
- Cloud-based Azure AD provisioning
Active Roles includes intuitive interfaces to optimize day-to- day administration and help-desk operations of the hybrid AD/AAD environment via both an MMC snap-in and a web interface.
Ensures AD data integrity and compliance
With Active Roles you can establish consistency and accountability through automation. Audit capabilities support compliance reporting. Along with modern authentication using OAUTH, Active Roles has robust and personalized approval procedures that establish an IT process and oversight consistent with business requirements, with responsibility chains that complement the automated management of directory data.
Active Roles allows you to Sync multiple data sources across the organization for consistency and improved security and efficiency.
Active Roles and OneLogin Workforce Identity Working Together
The powerful combination of Active Roles and OneLogin helps:
- Increase efficiency and consistency of user and group access management across legacy and cloud applications to help accelerate IT admin and user productivity
- Empower organizations to adopt a least-privilege model, strengthening overall security
- Provision role-based access to applications (OneLogin) based on real-time sync with AD (managed by Active Roles) to ensure AD admins and users have only the rights necessary to do their job
