# Managing AD Group Permissions

**URL:** <https://forums.suse.com/t/managing-ad-group-permissions/29261>\
**Category:** SLES Configure-Administer\
**Created:** [January 19, 2017, 9:44pm UTC](https://forums.suse.com/t/managing-ad-group-permissions/29261 "2017-01-19T21:44:30Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![acastaneda32](https://avatars.discourse-cdn.com/v4/letter/a/cab0a1/32.png) [@acastaneda32](https://forums.suse.com/u/acastaneda32)\
**Post date:** [January 19, 2017, 9:44pm UTC](https://forums.suse.com/t/managing-ad-group-permissions/29261/1 "2017-01-19T21:44:30Z")

</div>

I have added my SLES 11 SP3 system to our domain with the following configuration after running “yast2 samba-client”

[x] Also Use SMB Information for Linux Authentication  
[x] Create Home Directory on Login  
[x] Offline Authentication  
[] Single Sign-On for SSH

I then edited the /etc/security/pam\_winbind.conf file and added an the Active Directory group (TestGroup1). I have restricted logging in successfully and now only members of TestGroup1 and root are able to SSH to the box.

However, I am now unsure of the best way to give and/or manage administrative rights for the AD group. I don’t want to give this group “god” rights, but do want the members to be able to administer the database/application they will be managing. Please advise.

---

<div class="post-metadata">

**Author:** ![Automatic\_Reply](https://avatars.discourse-cdn.com/v4/letter/a/ecb155/32.png) [@Automatic\_Reply](https://forums.suse.com/u/Automatic_Reply)\
**Post date:** [January 25, 2017, 7:30am UTC](https://forums.suse.com/t/managing-ad-group-permissions/29261/2 "2017-01-25T07:30:09Z")

</div>

acastaneda32,

It appears that in the past few days you have not received a response to your  
posting. That concerns us, and has triggered this automated reply.

These forums are peer-to-peer, best effort, volunteer run and that if your issue  
is urgent or not getting a response, you might try one of the following options:

- Visit [http://www.suse.com/support](http://www.suse.com/support) and search the knowledgebase and/or check all  
the other support options available.
- Open a service request: [https://www.suse.com/support](https://www.suse.com/support)
- You could also try posting your message again. Make sure it is posted in the  
correct newsgroup. ([http://forums.suse.com](http://forums.suse.com))

Be sure to read the forum FAQ about what to expect in the way of responses:  
[http://forums.suse.com/faq.php](http://forums.suse.com/faq.php)

If this is a reply to a duplicate posting or otherwise posted in error, please  
ignore and accept our apologies and rest assured we will issue a stern reprimand  
to our posting bot…

Good luck!

Your SUSE Forums Team  
[http://forums.suse.com](http://forums.suse.com)