permissions required for Microsoft Active Directory

[bec wilson]

Does anyone know what permissions are required for the user which is used to syncronize with Active Directory? Members of "Domain Users" only do not have the ability to syncronize the directoy. The only way it will work is with "Domain Admins" group which is not the right way to go about it.

thanks,

-ryan

[Rodrigo Girardi Adami · Accepted solution]

Hello,

I'm not an AD administrator however I can state that you must use an users that has permission to bind the tree and retrieve the AD tree to confluence side. In other words: If you use some AD user that can "see" all the tree, you should be okay.

However if you want to read and write in the AD tree, then you must set confluence with an AD user that can read and write the whole tree. :)

Hope that helps!

Regards,

Rodrigo Girardi Adami

[BernardoA]

The user that the application will use when connecting to the directory serve must be permission, so basically as mentioned in the last comment " If you use some AD user that can "see" all the tree, you should be okay."