Return
-
Title
Change Auditor shows high severity event "The DACL was changed for the group -
Description
Change Auditor may show high severity event "The DACL was changed for the group <object DN>" as Active Roles the source. -
Cause
Product designer. -
Resolution
There is a built-in scheduled task called “Sync of Permissions to Active Directory” this task is used to propagate permissions defined in an Access Template to Active Directory.
Active Roles uses this scheduled task to create or update permission entries in Active Directory based on the Access Template links that have the Permissions Propagation option enabled.