Ok, for 'One Click Approval' (guest access) to work, a sponsor group must check that the user exists in AD. In addition, I have some receptionists that need to be able to log in to the portal to manually create guest user accounts. All these receptionists are in a special AD group.
My dilemna; how can I construct my sponsor groups so that normal users can approve guest accounts, but they can not log into the sponsor portal to create guest accounts manually?
Every combination I can think of will allow normal users access to log into the sponsor portal which I don't want. Is there a way to create a sponsor group for receptionists (tied to the special AD group) whereby they can log into the sponsor portal and a sponsor group for all other (AD) users whereby they cannot log into the sponsor portal but they can approve guests using the 'One Click Approval' feature?
Thanks
Darren
