search

MicrosoftDocs / Windows-Admin-Center-Ideas-and-Feedback

Windows Admin Center's hub for ideas and feedback.
Creative Commons Attribution 4.0 International
20 stars 9 forks source link

Suggestions and feedback about Windows Admin Center #36

Open sakurayz opened 3 years ago

sakurayz commented 3 years ago

  1. The Windows Admin Center administrator role cannot manage AD users and DNS resource records.

  2. The Windows Admin Center Readers role cannot do anything. What is the significance of this group? WAC is not a monitoring software.

    There are multiple administrators in the company. Not every administrator needs the highest authority. They just do some simple management tasks, such as creating an account, resetting passwords, or managing DNS resource records.

    WAC has only three role groups, and the granularity of permissions simply cannot meet the needs. WAC looks more like a toy, a semi-finished product. The idea of Web-based RBAC is very good, and I hope Microsoft can increase development efforts as soon as possible.

Karl-WE commented 3 years ago

We experience the same issue when using role based access. Means users of Windows Admin Center are not necessarily local administrators of the objects to manage nor Domain Admins. This causes many issues with WinRM and WAC functionality. There should be a improved way to manage role based access and delegated roles.

RebeccaMbulaMs commented 6 months ago

Hi @sakurayz and @Karl-WE Its been a while since we received this feedback. I'd like to hear your requirements for RBAC for your current environment. Please ping me on rwambua@microsoft.com and lets set a call?