HOW-TO: Add, Edit, and Manage Active Directory Group Members

Overview

For AD-managed permissions, such asjenkins-master, Active Directory (AD) groups are used to determine which groups have which roles or permissions.To add, edit, or otherwise manager AD membership, perform the following.

Instructions

Active Directory - Groups

Active Directory - Members

Using Remote Desktop Protocol (RDP), log into the AD controller and edit the appropriate AD group.

1. Using Microsoft Remote Desktop (Mac) or Remote Desktop Connection (Windows), log into <destination>using your AD management account.
2. Click the Windows Start menu, run Windows Administrative Tools → Active Directory Administrative Center.
3. Click Global Search from the bottom right of the sidebar, enter the name of the AD group you wish to manage (e.g. “jenkins-developers”), double-click that group from the Results once found.
4. Click Members from the left sidebar.
5. Click the Add Member button from the right of the dialog, add the Teaching Strategies user to the group (or double-click any existing user to edit or remove them). Changes will save automatically when you exit the window.
6. Exit Active Directory Administrative Center and log out of your RDP session.

NOTES:

• Windows Active Directory Users and Computers (ADUC) and PowerShell are both supported. We can revisit this page with instructions for either if we wish to script this process.