Tranquil IT Forum

Hello
, we've successfully configured user and certificate management to restrict console users to only seeing machines where an associated certificate is deployed and to assign packages to those machines. This certificate is deployed at the organizational unit (OU) level.

However, if we grant a user the "Modify AD OU Packages" permission, they can then assign a package to any OU, even those where the certificate isn't deployed.
Is there a way to limit a user's ability to modify packages to only those OUs where the corresponding certificate is assigned?

Thank you.

We found the solution.
When assigning the right "Modify AD OU packages", you must select "allow specific package names" and enter the name of the OU package (which you can find by right-clicking on the OU -> create or edit package...) with a * in front so that the sub-OUs are also taken into account.

Exactly.
I wanted to answer you with exactly that, but you were too quick.