Block active directory user on firewall without associated group on Spark 1570

[jorgemsassuncao]

Hello,
Is it possible to block internet access through the firewall to a specific user in the active directory without creating an AD group?
I have a Spark 1570 with Gaia Embedded R81.10.05

I know it's possible to list the AD groups but I can't list the users...

[PhoneBoy · Accepted solution]

Unfortunately, there is no way to refer to a specific user in LDAP, only the group(s) they are a part of.
This sounds like a permissions issue with your AD user.

[Tom_Hinoue]

If its a Locally Managed appliance, this is a known limitation that you cannot select specific users from AD on SMB appliances.

See sk105977 - There is no option to add specific Active Directory users and organization units inside p...

>  This is the current design for locally managed SMB appliances. It is a best practice to use Active Directory groups to make maintenance easier.

[the_rock]

AS @Tom_Hinoue said, it is limitation for locally managed appliance. If its centrally managed, should be doable with access role, if you add say a group from AD server that contains a single user.

Andy