https://community.extremenetworks.com/t5/extremecloud-iq-site-engine/extreme-management-automatic-member-active-directory/m-p/17787#M584 <P>Does anybody have a detailed description how to configure Netsight so that different active directory users will get different rights?<BR />I have done the following:<BR />add some groups in AD and add them in "Administration" "Users" "Authorization Groups" with the "memberOf=CN=GG_..." statements,<BR />customized the Capabilities and<BR />set "Authentication Type" to "LDAP"<BR /><BR />I can successfully login with my test account and will find the test account as "Authorized User" as "Automatic Member = True" and the Authorization Group name that I have configured.<BR /><BR />But now the problem:<BR />If I remove the user from the AD group that give him the rights, he will be able to login until I reboot the netsight server.<BR /><BR />There is a description available for the legacy java tool (but it will not fix my problem):<BR /><A href="https://extremeportal.force.com/ExtrArticleDetail?an=000079877" target="_blank" rel="nofollow noreferrer noopener">https://extremeportal.force.com/ExtrArticleDetail?an=000079877</A><BR /><BR />I guess I have forgotten something but I didn't see, what it is.<BR /><BR />Any help is welcome.<BR /><BR />Regards,<BR />Axel</P> Mon, 31 Jul 2017 15:23:00 GMT ar1 2017-07-31T15:23:00Z https://community.extremenetworks.com/t5/extremecloud-iq-site-engine/extreme-management-automatic-member-active-directory/m-p/17787#M584 <P>Does anybody have a detailed description how to configure Netsight so that different active directory users will get different rights?<BR />I have done the following:<BR />add some groups in AD and add them in "Administration" "Users" "Authorization Groups" with the "memberOf=CN=GG_..." statements,<BR />customized the Capabilities and<BR />set "Authentication Type" to "LDAP"<BR /><BR />I can successfully login with my test account and will find the test account as "Authorized User" as "Automatic Member = True" and the Authorization Group name that I have configured.<BR /><BR />But now the problem:<BR />If I remove the user from the AD group that give him the rights, he will be able to login until I reboot the netsight server.<BR /><BR />There is a description available for the legacy java tool (but it will not fix my problem):<BR /><A href="https://extremeportal.force.com/ExtrArticleDetail?an=000079877" target="_blank" rel="nofollow noreferrer noopener">https://extremeportal.force.com/ExtrArticleDetail?an=000079877</A><BR /><BR />I guess I have forgotten something but I didn't see, what it is.<BR /><BR />Any help is welcome.<BR /><BR />Regards,<BR />Axel</P> Mon, 31 Jul 2017 15:23:00 GMT https://community.extremenetworks.com/t5/extremecloud-iq-site-engine/extreme-management-automatic-member-active-directory/m-p/17787#M584 ar1 2017-07-31T15:23:00Z