Active Directory recursive Settings

In Larger environments and when Multo Domain is used, calculating Service and Service Groups can take some time. For this, we implemented a Setting to disable or enable recursive calculation.

TABLE OF CONTENTS

• Description
• The Setting

Description

When a User starts a Request, we calculate all Services and Service Groups he is allowed so see.

See our How to limit Access to a Service for more Details

In larger Environments and multi-domain environments, it can take 1-2 Seconds to calculate all allowed Services and Service Groups.

So we recommend keeping the RBAC in au2mator as simple as possible and adding Users directly in the related Security Groups.

From the beginning, we only count direct memberships to keep performance as best as possible.

If you still want to add Sub Groups in Security Groups, you must enable a Setting.

The Setting

Navigate to Settings / Datasource and enable the "Search AD Groups recursively" to enable the Calculation with Sub Groups.

See our Datasources (Settings) for more Details