Hi,
We want to setup AD Group Management with FIM 2010 R2 to decrease the load on the service desk. We have different types approvals for members requesting to be added to groups. For some groups the user requests access and a manager / owner approves the access. For other types the user need to motivate why they need access, the owner then validates the reason and grant or deny access.
Currently both are handled by an electronic form completed by the user and submitted to the service desk where all of this is processed. We want to move the complete current manual group management process to FIM. The first type of approval is fairly easy to implement, but I am having problems with the second.
What I did notice is that if the group owner receives the email to approve the request, the message says that the user didn't provide a reason, but the user when requesting to join a group doesn't have the option to provide a reason.
My questions are as follows:
1. Where can I get a bit more advanced group management information, as the stuff I have found is very basic?
2. I noticed that a user can only request to become a member of a distribution list in Outlook if he or she click the "Join" icon. For security groups it must be done through the "Groups Website". Is this by design? (Also had to do a lot of stuff to display the groups on the home page of the Groups Website.)
3. What do I need to change or add to enable a user to provide a reason for joining a particular group?
Thanks
Johan Marais
JkM6228