5.2 Configuring the Administrators Module

Self Service Password Reset allows you define criteria to determine if users can access the Administration module. The Administration module allows users that are members of this group to access the Dashboard, the Configuration Editor, and the Configuration Manager. For more information about these features, see Section 2.0, Getting Started.

You must specify an LDAP group or define an LDAP filter or to search for users that you want to have administrative rights. When Self Service Password Reset finds the users that match the search criteria, it automatically assign users the administration rights. If you do not define the administration permissions for the admin group, then the administrator cannot access different modules on the home page, and an error message You do not have the privilege to access the module is displayed.

To define the criteria for administrators:

  1. Log in to Self Service Password Reset at https://dns-name/sspr as an administrator.

  2. In the toolbar, click your name.

  3. Click Configuration Editor.

  4. Click Modules > Authenticated > Administration.

  5. Specify the query for the users you want to be administrators. You can query by using Add Filter to define the LDAP filter that includes the object class, and by using Add Group that includes the LDAP group.

  6. In the toolbar, click Save changes.

  7. (Conditional) if you want to secure the configuration and make it accessible only to administrator, click Restrict Configuration in Configuration Activities section of Configuration Manager.