• Gazareth (3/6/2013)


    The other way to do it if possible would be to give role membership(s) to AD group(s), and control user membership in AD.

    That way you won't need to create a new user everywhere all the time.

    AD groups would be ideal.