Permissions

  • Required Permissions to create Groups and Users:
    $ComputerPath: Generic Read
    $GroupPath: Fullcontrol on group-objects
    $UserPath: Fullcontrol on user-objects
  • Required Permissions for Working with 12beAdmin:
    $UserPath: Reset user passwords
    $GroupPath: Write Member Attribute of an existing group

See: Least Privilege Scenario: Recommended

$Path Variables are defined in SearchBase.xml