9.1 Built-in ActiveViews

Built-in ActiveViews are the default ActiveViews provided by DRA. These ActiveViews represent all current objects and security settings. Thus, built-in ActiveViews provide immediate access to all your objects and settings as well as the default delegation model. You can use these ActiveViews to manage objects, such as user accounts and resources, or apply the default delegation model to your current enterprise configuration.

DRA provides several built-in ActiveViews that can represent your delegation model. The built-in ActiveView node contains the following ActiveViews:

All Objects

Includes all objects in all managed domains. Through this ActiveView, you can manage any aspect of your enterprise. Assign this ActiveView to the administrator or to an AA who needs auditing powers across the enterprise.

Objects Current User Manages as Windows Administrator

Includes objects from the current managed domain. Through this ActiveView, you can manage user accounts, groups, contacts, OUs, and resources. Assign this ActiveView to native administrators who are responsible for account and resource objects in the managed domain.

Administration Servers and Managed Domains

Includes Administration server computers and managed domains. Through this ActiveView, you can manage the daily maintenance of your Administration servers. Assign this ActiveView to AAs whose duties include monitoring the synchronization status or performing cache refreshes.

DRA Policies and Automation Triggers

Includes all policy and automation trigger objects in all managed domains. Through this ActiveView, you can manage policy properties and scope, as well as automation trigger properties. Assign this ActiveView to AAs responsible for creating and maintaining your company policies.

DRA Security Objects

Includes all security objects. Through this ActiveView, you can manage ActiveViews, AA groups, and roles. Assign this ActiveView to AAs responsible for creating and maintaining your security model.

SPA Users from All Managed and Trusted Domains

Includes all user accounts from managed and trusted domains. Through this ActiveView, you can manage user passwords via Secure Password Administrator (SPA).

9.1.1 Accessing Built-in ActiveViews

Access built-in ActiveViews to audit the default delegation model or manage your own security settings.

To access built-in ActiveViews:

  1. Navigate to Delegation Management > Manage ActiveViews.

  2. Ensure the search field is blank, and click Find Now in the List items that match my criteria pane.

  3. Select the appropriate ActiveView.

9.1.2 Using Built-in ActiveViews

You cannot delete, clone, or modify built-in ActiveViews. However, you can incorporate these ActiveViews into your existing delegation model or use these ActiveViews to design your own model.

You can use built-in ActiveViews in the following ways:

  • Assign the individual built-in ActiveViews to the appropriate AA groups. This association allows the AA group members to manage the corresponding set of objects with the appropriate powers.

  • Refer to the built-in ActiveView rules and associations as guidelines towards designing and implementing your delegation model.

For more information about designing a dynamic delegation model, see Understanding the Dynamic Delegation Model.