This is an interactive task for adding & removing Users to & from an Active Directory Security Group.
This task only modifies direct group memberships, not nested memberships.
Required Vault Details
- IP/DNS address of a Domain Controller
- Domain FQDN
As this is a privileged task, the Active Directory credentials require the permission to add & remove Users to & from Security Groups.
Vault Configuration Wizard
The first time you run a task built from this playbook, PPA will check the required Vault details exist.
If they don't exist, PPA will ask you to supply the details at the start of the task.
Below you can see a user providing details the first time they run an Active Directory task.
Once the details are added to Vault, the task won't ask for them again.
If you don't know the required details, ask an administrator to run the task or configure Vault manually.
What the Task Does
Once started, this task allows the operator to:
- Search for and select an Active Directory Security Group
- Choose whether to add Users, remove Users, or both