Skip to content

Domain admins not able to add LDAP users #3687

Description

@borisstoyanov
ISSUE TYPE
  • Improvement Request
COMPONENT NAME
UI, API
CLOUDSTACK VERSION
4.14 
SUMMARY

Domain admins are not able to see the ‘Add LDAP Account' button at both “Account” tab and Domain - > Accounts tab.
It would be really good if they can manage that as well, since they manage native users within the domain

Activity

  1. yadvr commented on Aug 12, 2020

    @yadvr
    Member

    cc @DaanHoogland @davidjumani any remarks?

  2. davidjumani commented on Aug 13, 2020

    @davidjumani
    Contributor

    @borisstoyanov This would require a backend change as right now only admins can create ldap accounts

  3. DaanHoogland commented on Aug 17, 2020

    @DaanHoogland
    Contributor

    I have my doubts. domain level ldap binding would only work for autosync'd ldap accounts/users. I am not sure it is usefull to manually add users to those. on root level giving domain admins access would also not be right. Not saying that there is no usecase, just that I don't see it yet.

  4. added this to the unplanned milestone on Jan 29, 2021
  5. kiranchavala commented on May 23, 2025

    @kiranchavala
    Member

    @DaanHoogland @borisstoyanov

    I think this is a valid enhancement request , Please consider it for the next release

    1. Currently, we are providing the option of linking domain to a ldap configuration from the UI
    Image
    1. But there is no option to import a ldap account to a particular domain from the UI

    Navigate to account > and there is no option to ldap account

    Image

    1. Currently, only the admin user has permission to use the API to add create a ldap account in a domain

    https://cloudstack.apache.org/api/apidocs-4.20/apis/ldapCreateAccount.html

    The add ldap account only shows up for that admin user when not mapped to any domain

    Image
    1. Currently, the domain admin user can create accounts of different role types in domain.

    It would be great if the domain admin user can import ldap account to his domain.

    Image
  6. 15 remaining items

  7. modified the milestones: 4.22.1, 4.23.0 on Apr 24, 2026
  8. modified the milestones: 4.23.0, 4.24.0 on Jun 29, 2026
  9. RosiKyu commented on Aug 13, 2026

    @RosiKyu
    Collaborator

    @borisstoyanov, @DaanHoogland - do we plan to work on this for the 24.0 release?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Projects

Relationships

None yet

Development

No branches or pull requests

Issue actions