Lab 4: Performing Organizational and Security Tasks

Estimated Time to Complete: 60 minutes

In this lesson you will learn:

  • How to use organizations to ease administration tasks.
  • How to use create users using both Business Desk and the SupplierAD site.
  • How to grant limited access to Business Desk modules and tasks for specific users.

Business Desk organizations are used to link users, or groups of users, to catalogs to reduce administration tasks. A base catalog is assigned to a catalog set, and the catalog set is assigned to an organization. Note that base catalogs cannot be assigned directly to an organization. Users, both normal users and administrators, are also assigned to an organization. By assigning a user, or a group of users, to an organization, the user or user group inherits the catalog set of the organization, thereby simplifying administration.

Scenario: In this lab you will create an organization for each of your product groups: Office Supplies and Office Machines. Next you will create an administrator Windows account for each product group, and assign these administrators, also called delegated administrators, accounts to their respective organization. You will assign the appropriate catalog set, in which you created Lab 3 Lesson 5: Creating Catalog Sets, to an organization that you will create in this lab.

You will grant access to the catalog sets, that you created in Lab 3 Lesson 5: Creating Catalog Sets, to the appropriate organization. You will then create an administrator account for each trading partner, and add these accounts to the appropriate organization. Next, you will add these user accounts to the Business Desk Security Permissions list, and grant limited access to specific modules, catalogs, and tasks for these accounts to the appropriate catalog set. Finally, you will verify that your trading partners have only the access to Business Desk modules and tasks that you configured. You will also create a normal user and verify that the normal user is not an administrator.

The advantages of the SupplierAD Solution site are the following:

  • A Business Desk manager can create Windows user accounts using Business Desk.
  • Business Desk Managers can manage users for their sites without having to be domain administrators, or having knowledge of Active Directory.
  • User passwords are stored in Active Directory in an encrypted format, which makes this scenario more secure than storing passwords in SQL Server.

Each of the lessons listed below is a prerequisite for the subsequent lesson. It is important to complete each lesson in the order listed.

Copyright © 2005 Microsoft Corporation.
All rights reserved.