®

Active Roles
Put security first to protect your hybrid
identity environment

Extend native identity security and management
capabilities with visibility across all Microsoft
AD and M365 domains and Entra ID tenants froma single pane of glass with One Identity Active
Roles. Protect, automate and unify administration
across your entire hybrid environment andsynchronize identity data across directories toincrease security and simplify administration.
Implement a least privilege Zero Trust strategy
with Active Roles using fine-grained privileged
access and delegation for users and objects With
Active Roles, you can focus on other IT tasks
knowing your critical data, user permissions
and privileged access are under control.

Overview
With One Identity Active Roles Tedious and errorprone administrative tasks are a thing of the past.
Active Roles automates and unifies user andgroup administration, across AD/Entra ID/M365
synchronizing policies across platforms while
securing and protecting privileged administrative
access, driving efficiency and accuracy.

Benefits• Protects critical Active Directory, Entra ID
and M365 data
• Regulates administrative access via aleast-privilege model• Overcomes native-tools limitations• Automates users/group account creationand deletion• Provides a single, intuitive tool for
hybrid identity security and management• Generates audit-ready history andactivity tracking so you know whenchanges are made and by whom
• Deploys quickly for rapid time-to-value• Expands AD-centered identity
management to many non-Windows
and SaaS systems

Features

Secure accessHybrid AD-readyWith Active Roles you can use an RBAC model todelegate granular privileges and ensure identities
and objects have the privileges they should.You
can also deprovision those privileges to reduce
standing privilege and thereby reduce risk to yourorganization.

Active Roles consolidates visibility and serves theneeds of both on-prem AD, Entra ID and M365 ina hybrid deployment. Via a single console, you canunify workflows and provision consistently acrossall domains and tenants across your entire hybridenvironment.

Identities
Employees
Partners
Suppliers
Service Accounts
Bots

Directory

tive Roles
Ac

Groups & Roles
Accounting
Marketing
Finance

Active Directory
Entra IDAWS Managed AD
M365Objects

ExchangeComputers
Printers

Automate account administrationActive Roles automates a wide variety oftasks, including:• Creating user and group accounts
in AD, Entra ID and M365
• Easily extending AD/Entra ID/M365based account administrative actions toSaaS apps and non-Windows systems• Creating mailboxes in Exchange• Populating groups across your identity landscape• Assigning resources in Windows
It also automates the process of reassigning andremoving user access rights in AD, Entra ID andAD-joined systems. When a user’s access needs tobe updated, automated workflows synchronize thatchange across all relevant systems and applications
including any AD-joined systems, across yourhybrid AD/Entra ID environment such as UNIX,
Linux and Mac OS X.

Day-to-day directory management
With Active Roles, you can easily manage allof the following for both the on-prem andEntra ID environments:• Exchange recipients, including mailbox/OCS
assignment, creation, movement, deletion,permissions and distribution list management• Dynamic Groups, Distribution Groups• Computers, including shares, printers,
local users and groups• Virtual Attributes of Users• All other AD, Entra ID or M365 Directory Objects
Active Roles consolidates security and administration onto a single console to optimize day-to-day
administration and help-desk operations of a hybrid
AD/Entra ID/M365 environment via both an MMC
snap-in and a web interface.

Active Roles also supports the most popular andrelevant customization options such as PowerShellto deliver maximum flexibility.

Extend the administrative scope
Active Roles provides account and group administration of any SCIM-enabled SaaS application (via
One Identity Starling Connect).

Manage groups and users
in a hosted environment
Active Roles enables user and group accountmanagement from the client domain to the hosted
domain, while also synchronizing attributes andpasswords. Out-of-the- box connectors synchronize
your on-premises AD accounts to Microsoft 365,
Teams and SharePoint.

Consolidate management
points through integration
Active Roles ensures integration with many One
Identity products, including Identity Manager,
Safeguard, Authentication Services, Password
Manager, and Change Auditor. Active Roles also
automates and extends the capabilities of PowerShell,
ADSI, SPML and customizable web interfaces.
Active Roles:• Oracle Database• AD LDS• Oracle Unified Directory• Microsoft 365• Exchange• Entra ID• OneDrive• Microsoft SQL Server• SharePoint• Flat file

About One Identity
One Identity delivers comprehensive cloud andon-premises identity security solutions that help
customers strengthen their overall cybersecurity
posture and protect the people, applications anddata essential to their business. Our Unified Identity
Platform brings together best-in-class identity
governance and administration (IGA), accessmanagement (AM), privileged access management(PAM) and Active Directory management (ADMgmt) capabilities. This holistic approach enables
organizations to increase the visibility, controland protection over all their identities. Proven andtrusted on a global scale, One Identity manages
more than 500 million identities for more than
11,000 organizations worldwide. For more
information, visit www.oneidentity.com.

© 2024 One Identity LLC ALL RIGHTS RESERVED. One Identity, and the One Identity logo are trademarks and registered trademarks of One Identity LLC in the U.S.A. and other countries. For a complete list of One Identity trademarks,
please visit our website at www.oneidentity.com/legal. All other trademarks, servicemarks, registered trademarks, andregistered servicemarks are the property of their respective owners. Datasheet-2023-Active-Roles-KA-93808®