Web Interface Tab

Question

Chaps. 
 Is there a way if I create a new tab on say the user object , that you only see said tab if you are member of a certain security group? 
 Thanks in advance

Richard.Lambert · Answer

Web interface tab visibility can be controlled based on a person's ability to modify a certain attribute of the selected object. You could then create an Access Template that grants an AD Group the ability to modify say one of these tick boxes (Virtual Attributes perhaps?) that is an attribute of user objects. 
 I'm still seeing that Internet Explorer needs to be used to edit the tab's Visibility controls. From within the Visibility section, you can select an attribute that the users must be able to modify in order to see that tab. With the Access Template link in place to the proper directory object(s) and trustee (AD group), you can then add users to the group that either allows (to view the tab) or blocks/denies (to hide the tab) the members of the group to the selected attribute. 
 Have a look at this section of the web admin guide: 
 Active Roles 7.4.4 - Web Interface Administration Guide (oneidentity.com)

Endpoint Privilege Management

Web Interface Tab

Top Replies