®

Active RolesManagement and security for hybrid
Active Directory and beyond

Extend and enhance native capabilitiesof Active Directory (AD) and Azure AD
with One Identity Active Roles. Automate
and unify account and group administration
while securing and protecting all-important
administrative access. Focus on other IT tasks
knowing your critical data, user permissions
and privileged access are under control.

Active Roles is the industry
leading toolkit for AD/ Azure
AD account management
and security.
Overview
Active Roles delivers automated tools for userand group- account management to overcome
the shortcomings of native Active Directory andAzure Active Directory tools. This accelerates andautomates user provisioning, and drives efficiency
and accuracy.
With One Identity Active Roles, tedious and errorprone administrative tasks are a thing of the past.
Active Roles automates and unifies account andgroup administration while securing and protecting
privileged administrative access.

Benefits• Protects critical Active Directoryand Azure Active Directory data
• Regulates administrative accessvia a least-privilege model• Overcomes native-tools limitations• Automates users/group accountcreation and deletion• Provides a single, intuitive toolfor hybrid environment• Generates audit-ready reports
so you know when changes
are made and by whom
• Modular architecture deploys
quickly for rapid time-to-value• Expands AD-centered identity
management to many nonWindows and SaaS systems

It also automates the process of reassigning andremoving user access rights in AD, Azure AD
and AD-joined systems. When a user’s accessneeds to be updated, automated workflows
make the change across all relevant systems
and applications in the hybrid AD/Azure ADenvironment. This includes any AD-joined systems,
such as UNIX, Linux and Mac OS X.

Day-to-day directory management

Features
Hybrid AD-ready
Active Roles consolidates control and is optimized toserve the needs of both on-prem AD and Azure AD in a
hybrid deployment. Via a single console, you can unify
workflows and finally enjoy consistent provisioning
processes across your entire hybrid environment.
It eliminates having to manage Active Directory &Azure AD tenants and environments separately.

Secure access
Active Roles provides comprehensive privileged
account and group management for Active
Directory and Azure Active Directory, so yourorganization can achieve the security and efficiency
of a least-privilege model. Along with modern
authentication using OAuth2, Active Roles has
robust and personalized approval procedures that
establish an IT process and oversight consistent
with business requirements.

Automate account administration
Active Roles automates a wide variety oftasks, including:• Creating user and group accounts
in AD and Azure AD• Easily extending AD/Azure AD-based
account administrative actions to SaaS
apps and non-Windows systems

With Active Roles, you can easily manage allof the following for both the on-prem andAzure AD environments:• Exchange recipients, including mailbox/OCS
assignment, creation, movement, deletion,
permissions and distribution list management• Dynamic Groups, Distribution Groups• Computers, including shares,printers, local users and groups• Virtual Attributes of Users• All other Active Directory and Azure
Active Directory Objects
Active Roles includes intuitive interfaces tooptimize day-to-day administration and help-desk
operations of the hybrid AD/Azure AD environment
via both an MMC snap-in and a web interface.

Automatic updates in AD, Azure
AD, Exchange, SharePoint, OCS,Teams, as well as any AD-joinedsystems such as UNIX, Linux andMac OS X and SaaS apps.
Active Roles also supports the most popular andrelevant customization options such as PowerShellto deliver maximum flexibility and the ability
to use Active Roles in the manner that is mostadvantageous to your organization.

• Creating mailboxes in Exchange• Populating groups across AD and Azure AD• Assigning resources in Windows2®

Active Roles comes with all the synchronization
technology for the following systems into ActiveDirectory and Azure AD:• Oracle Database• Oracle Unified Directory• Exchange• OneDrive• SharePoint

Extend the administrative scope
Active Roles supports any SCIM-enabled SaaS
application (via One Identity Starling Connect) to be
managed in the AD and Azure AD based account andgroup administration capabilities of Active Roles.

• AD LDS• Microsoft 365• Azure AD• Microsoft SQL Server• Flat file

Manage groups and users
in a hosted environment
Synchronize AD domain clients with a host AD
domain in hosted environments. Active Roles
enables user and group account management fromthe client domain to the hosted domain, while alsosynchronizing attributes and passwords. Utilizeout-of-the- box connectors to synchronize youron-premises AD accounts to Microsoft 365, Teamsand SharePoint.

Consolidate management
points through integration
Active Roles complements your existing IAM strategy.
It simplifies and consolidates management points
by ensuring easy integration with many One Identity
products, including Identity Manager, Safeguard,Authentication Services, Password Manager, andChange Auditor. Active Roles also automates andextends the capabilities of PowerShell, ADSI, SPML
and customizable web interfaces.

About One Identity
One Identity delivers unified identity security
solutions that help customers strengthen theiroverall cybersecurity posture and protect thepeople, applications and data essential to business.
Our Unified Identity Security Platform brings
together best-in-class Identity Governance andAdministration (IGA), Access Management (AM),Privileged Access Management (PAM) and Active
Directory Management (ADMgmt) capabilities toenable organizations to shift from a fragmented
to a holistic approach to identity security. One
Identity is trusted and proven on a global scale –managing more than 500 million identities for morethan 11,000 organizations worldwide. For more
information, visit www.oneidentity.com.

© 2023 One Identity LLC ALL RIGHTS RESERVED. One Identity, and the One Identity logo are trademarks and registered trademarks of One Identity LLC in the U.S.A. and other countries. For a complete list of One Identity trademarks,
please visit our website at www.oneidentity.com/legal. All other trademarks, servicemarks, registered trademarks, andregistered servicemarks are the property of their respective owners. Datasheet-2023-Active-Roles-US-PG-77334®