GrantUnityAccess to a GROUP?

[jcharney13]

I'm trying to determine if there is a way to add a group of users as Administrator accounts by using the GrantUnityAccess tool. I know that it can be used for individual accounts but we have a large number of administrative accounts that we are setting up and would rather not have to add each account individually.

We are basically giving existing subscribers a secondary admin account that they will be using to login to servers to perform most functions.

We are also not sure of the difference between the Installer rights and the EAdministrator rights. It seems that EAdministrator does all the user configurations that are needed.

We are running Unity 3.1.5 with Exchange 2000 running offbox.

[lindborg]

No, you can't assign a group rights in Grant Unity access - the Id of each user needs to map in - when the user hits IIS it's that ID that we'll be looking up to see if they are allowed to access the admin pages and that's all we'll have to work with.

Using EAdministrator is fine so long as you don't plan to remove that account along the way - some sites decide to use this to free up the license. The installer account is internal and cannot be removed so it's always there.

[jcharney13]

Thanks, that's what we figured. We did figure out a way to use a VBS script to pull the members of the group and then run the GrantUnityAccess for each user from a command prompt. It gets the job done but doesn't pull nested group members but for what we are doing that isn't too big of a deal.