Hello,
As we're attempting to get a successful connection for an ADSI connector and we're running into error. Leadership has been reluctant to provide the Service Account we're using Domain Admin privileges in AD.
The errors we're getting state "User does not have access to create group" and "User does not have access to manage group". The current service account we're using doesn't have access to administrate groups in a handful of OUs (as we're attempting "least privilege"), other then that it has full create, manage, move, and delete permissions throughout the forest.
Link to "Preparing for ADSI Integration" guide below. It mentions that Domain Admin is required, then goes on to say that "Least Privilege" can be applied.
https://docs.saviyntcloud.com/bundle/ADSI-v2021x/page/Content/Preparing-for-Integration.htm#Preparin
Can anyone help clarify what it needed for the Service Account permissions for ADSI?
Thank you!
Adam
For clarity this is the error we're getting during the initial "save and test" on the connection.
Add below features in custom Sav roles
- Create ADSI Group Allows users to request ADSI groups creation
- Manage ADSI Group Gives ability to create, manage & view ADSI groups
