Authorization Manager (AzMan)

[b***@hotmail.com]

Hello I'm reading about AzMan. I was wondering if this tool is of any
interest to system administrators (how then ?) or is it something that
is designed to be used by developers and alike (like ADAM I suppose).

Thanks for the info and Regards.

[Tomasz Onyszko]

Post by b***@hotmail.com
Hello I'm reading about AzMan. I was wondering if this tool is of any
interest to system administrators (how then ?) or is it something that
is designed to be used by developers and alike (like ADAM I suppose).

I can say that this is for both groups - for developers to use it as a
mechanism which allows You to check if a user is in ppecific role and
then grant some permission to this user and for admins to control who is
in specific role:

I think this two articles can give You better overview of AzMan usage:

http://msdn.microsoft.com/msdnmag/issues/03/11/AuthorizationManager/
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnpag2/html/paght000019.asp

[b***@hotmail.com]

Hey Thomasz,

thank you for your answer. I had a look at the links you sent. Still I
would like to ask you: I'm a system admin, not a developer. How would I
use AzMan in my Active Directory Infrastructure. Could it replace
somehow AD delegations ? Could I use it to regulate access to network
resources ? Like standard win32 applications ? Do I need to use
scripting ?

Thanks again for your time.

[Joe Kaplan (MVP - ADSI)]

No, it is an authorization framework for custom applications. The primary
role of the administrator in this is to configure the runtime authorization
policy for the application using AzMan.

The only way AzMan could replace something like AD delegation is if you
wrote an entire application to perform the delegated tasks (user management,
group management, etc.). People definitely do this (for example if they
want a web-based AD administration tool or if they want to give rights to
people, but only through one specific UI), but the "normal" AD tools won't
help with this.

HTH,

Joe K.

Post by b***@hotmail.com
Hey Thomasz,
thank you for your answer. I had a look at the links you sent. Still I
would like to ask you: I'm a system admin, not a developer. How would I
use AzMan in my Active Directory Infrastructure. Could it replace
somehow AD delegations ? Could I use it to regulate access to network
resources ? Like standard win32 applications ? Do I need to use
scripting ?
Thanks again for your time.

[b***@hotmail.com]

OK. Thank you for your answer.