Does it always have to be the administrator?

At this point too, special solutions are provided, which allow a selective management of the Active Directory by employees of the personnel department or responsible persons. Thus, non-administrators are also able to make the necessary changes themselves, and programs – such as “Flowster” – allow a very fine control, which parameters are at all available and which can possibly only be used by dependencies of other values.


Administrators may be concerned about the fact that improper editing will lead to problems in the environment. However, the administrator himself defines the design of the workflows and also defines the framework in which the department or personnel department itself can move. At the same time, programs of this kind solve the need for the provision of non-personalized accounts. Personnel responsible people know which employees have access to which resources by which name.


If the level of automation in the company increases even further, IT managers with management suites, such as Matrix42, can also use service catalogs to provide user accounts, storage areas or dropbox accounts as in a shopping process. The Matrix42 software service service automatically creates the user, links the necessary authorizations, and also calculates with SAP. However, such a conception requires a well-elaborated structure of the processes. For companies that do not even know exactly which resources users have access to at all, this is less suitable.